Skip to content

Ubuntu dev container is broken #63

Description

Describe the bug
Ubuntu dev container is broken.

I'm guessing the mcr.microsoft.com/mirror/docker/library/ubuntu:20.04 image has changed.
The .devcontainer/install-ubuntu-dependencies.sh fails whilst making the image.

There are multiple issues with the script. The first one is that sudo is missing from the image, so it has to be installed right after apt-get update.

The following packages will also need to be added to the apt install section:
wget liblocale-gettext-perl fakeroot libncurses-dev

The build will still fail due to missing bpf_helpers.h

In file included from /workspaces/ProcMon-for-Linux/src/tracer/ebpf/kern/procmonEBPFkern5.6-.c:25:
/workspaces/ProcMon-for-Linux/src/tracer/ebpf/kern/procmonGenericEntry_rawtp.c:39:10: fatal error: 'bpf_helpers.h' file not found

I'm guessing that's due to missing https://github.com/microsoft/SysinternalsEBPF, which should probably be installed in CMakeList.txt

To Reproduce
Start with a clean repo and open in vscode dev container. You might need to delete an existing dev container image.

Sysmon version
N/A

Distro/kernel version
Ubuntu 22.04.5/6.8.0-52-generic

Logs
Output of log with enough log entries to cover the timespan of the issue.

Expected behavior
A successful build after opening the dev container and following the instructions in BUILD.md

Additional context
Add any other context about the problem here.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions