gvisor.dev/gvisor@v0.0.0-20240520182842-f9d4d51c7e0f/examples/seccheck/pod_init.json (about)

     1  {
     2    "trace_session": {
     3      "name": "Default",
     4      "points": [
     5        {
     6          "name": "container/start"
     7        },
     8        {
     9          "name": "sentry/clone"
    10        },
    11        {
    12          "name": "sentry/task_exit"
    13        },
    14        {
    15          "name": "syscall/openat/enter"
    16        },
    17        {
    18          "name": "syscall/openat/exit"
    19        },
    20        {
    21          "name": "syscall/read/enter",
    22          "optional_fields": [
    23            "fd_path"
    24          ],
    25          "context_fields": [
    26            "time",
    27            "container_id",
    28            "thread_id"
    29          ]
    30        },
    31        {
    32          "name": "syscall/read/exit"
    33        },
    34        {
    35          "name": "syscall/sysno/1/enter",
    36          "context_fields": [
    37            "time",
    38            "container_id"
    39          ]
    40        },
    41        {
    42          "name": "syscall/sysno/1/exit"
    43        }
    44      ],
    45      "sinks": [
    46        {
    47          "name": "remote",
    48          "config": {
    49            "endpoint": "/tmp/gvisor_events.sock",
    50            "retries": 3
    51          },
    52          "ignore_setup_error": true
    53        }
    54      ]
    55    }
    56  }