Skip to content

ROX-34104: deduplicate overlayfs events#500

Merged
Stringy merged 2 commits intomainfrom
giles/ROX-34104-deduplicate-overlayfs-events
Apr 21, 2026
Merged

ROX-34104: deduplicate overlayfs events#500
Stringy merged 2 commits intomainfrom
giles/ROX-34104-deduplicate-overlayfs-events

Conversation

@Stringy
Copy link
Copy Markdown
Contributor

@Stringy Stringy commented Apr 13, 2026

Description

Introduces a new map to track overlayfs open event duplication in the BPF driver, keeping the overlayfs event which tends to have the richer information
(e.g. create)

The underlying file system event is dropped.

Checklist

  • Investigated and inspected CI test results
  • Updated documentation accordingly

Automated testing

  • Added unit tests
  • Added integration tests
  • Added regression tests
  • modified existing tests

If any of these don't apply, please comment below.

Testing Performed

Existing overlyfs tests (correctly) failed with the duplication fix. Removing the extra (open) events resulted in the tests passing again.

Introduces a new map to track overlayfs open event
duplication in the BPF driver, keeping the overlayfs
event which tends to have the richer information
(e.g. create)

The underlying file system event is dropped.
@Stringy Stringy requested a review from a team as a code owner April 13, 2026 14:00
Comment thread fact-ebpf/src/bpf/inode.h
Comment thread fact-ebpf/src/bpf/maps.h Outdated
Comment thread fact-ebpf/src/bpf/inode.h
@Stringy Stringy requested review from a team and JoukoVirtanen April 13, 2026 17:32
Copy link
Copy Markdown
Contributor

@JoukoVirtanen JoukoVirtanen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@Stringy Stringy merged commit 1b96f68 into main Apr 21, 2026
26 of 28 checks passed
@Stringy Stringy deleted the giles/ROX-34104-deduplicate-overlayfs-events branch April 21, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants