I am running tracee as a pod in kubernetes with the below definition on Minikube . . .

Kubernetes-Slack Discussions
#1

Sid B:
I am running tracee as a pod in kubernetes with the below definition on Minikube

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: tracee
  name: tracee
spec:
  containers:
  - image: aquasec/tracee:0.4.0
    name: tracee
    securityContext:
      privileged: true
    volumeMounts:
    - name: libmount
      mountPath: /lib/modules
      readOnly: true
    - name: usrsrc
      mountPath: /usr/src
      readOnly: true
    - name: tmp
      mountPath: /tmp/tracee
  volumes:
  - name: libmount
    hostPath: 
      path: /lib/modules
  - name: usrsrc
    hostPath:
      path: /usr/src
  - name: tmp
    hostPath:
      path: /tmp/tracee

However I am getting the below error. Please can anyone help?

bash-3.2$ kubectl apply -f tracee-pod.yaml 
pod/tracee created
bash-3.2$ kubectl get pods -w
NAME           READY   STATUS    RESTARTS   AGE
amicontained   1/1     Running   2          6h57m
tracee         0/1     Error     0          2s
tracee         0/1     Error     1          2s
tracee         0/1     CrashLoopBackOff   1          3s

bash-3.2$ kubectl logs tracee
2021/07/22 18:33:00 missing kernel source code compilation dependency
#2

unnivkn:
I suggest, first you try on our lab, before practicing on Minikube

#3

SidB:
Its working on the labs perfectly. I am trying to extend the capability to other K8S environments

#4

SidB:
It is giving the same error of missing kernel source code compilation dependency even when I run as docker on minikube server

#5

unnivkn:
ok… there may be some additional kernel setting running behind the lab, that may be missing in your case.

#6

unnivkn:
Also minikube is having some limitation I guess, it won’t support all commands

#7

Sid B:
Ok. Thanks