From b414466892126d74dde5323a4721747358e6925d Mon Sep 17 00:00:00 2001
From: Joel Takvorian <joel.takvorian@qaraywa.net>
Date: Mon, 12 May 2025 18:49:49 +0200
Subject: [PATCH] Fix pca - need to unpin ipsec maps (#696)
* Fix pca - need to unpin ipsec maps
* pca: set ipsec hooks nil
---
pkg/tracer/tracer.go | 11 ++++++++++-
1 file changed, 10 insertions(+), 1 deletion(-)
diff --git a/pkg/tracer/tracer.go b/pkg/tracer/tracer.go
index 90f1750c..7e91bc96 100644
--- a/pkg/tracer/tracer.go
+++ b/pkg/tracer/tracer.go
@@ -1439,7 +1439,10 @@ func NewPacketFetcher(cfg *FlowFetcherConfig) (*PacketFetcher, error) {
filterMap,
peerFilterMap,
globalCountersMap,
- pcaRecordsMap} {
+ pcaRecordsMap,
+ ipsecInputMap,
+ ipsecOutputMap,
+ } {
spec.Maps[m].Pinning = 0
}
@@ -1460,6 +1463,8 @@ func NewPacketFetcher(cfg *FlowFetcherConfig) (*PacketFetcher, error) {
delete(spec.Programs, tcpFentryHook)
delete(spec.Programs, aggregatedFlowsMap)
delete(spec.Programs, additionalFlowMetrics)
+ delete(spec.Programs, ipsecInputMap)
+ delete(spec.Programs, ipsecOutputMap)
delete(spec.Programs, constSampling)
delete(spec.Programs, constHasFilterSampling)
delete(spec.Programs, constTraceMessages)
@@ -1496,6 +1501,10 @@ func NewPacketFetcher(cfg *FlowFetcherConfig) (*PacketFetcher, error) {
TcpRcvKprobe: nil,
KfreeSkb: nil,
NetworkEventsMonitoring: nil,
+ XfrmInputKretprobe: nil,
+ XfrmOutputKretprobe: nil,
+ XfrmInputKprobe: nil,
+ XfrmOutputKprobe: nil,
},
BpfMaps: ebpf.BpfMaps{
PacketRecord: newObjects.PacketRecord,
--
GitLab