How to specify the path of ebpf driver

[dandankasha]

I downloaded the corresponding version of the ebpf.o file and latest falco container image to the machine in an environment where I cannot connect to the Internet.

How should I specify the path of the driver when starting the container instead of downloading it from the Internet?

[poiana]

There is not a label identifying the kind of this issue.
Please specify it either using /kind <group> or manually from the side menu.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[FedeDP]

Hi!
So, given you are sharing the volume where the ebpf probe is located with the container, you should:

docker run -ti --rm --privileged falcosecurity/falco-no-driver:latest falco -o engine.ebpf.probe=/path/to/probe.o -o engine.kind=ebpf

(leaving out any -v option of course!)