Project: Falco (Provisioning / Security & Compliance)
File: 20210119-libraries-contribution.md

Sysdig Inc. intends to donate libsinsp, libscap, the kernel module driver and the eBPF driver sources by moving them to the Falco project. This means that some parts of the repository will be moved to a new GitHub repository called . This plan aims to describe and clarify the terms and goals to get the contribution done. There are two main OSS projects using the libraries and drivers that we are aware of: the command line tool , the CNCF project. Since the Falco project is a heavy user of the libraries, a lot more than the sysdig cli tool, Sysdig (the company) decided to donate the libraries and the driver to the Falco community. Sysdig (the command line tool) will continue to use the libraries now provided by the Falco community underneath. This change is win-win for both parties because of the following reasons: The Falco community owns the source code of the three most important parts of the software it distributes. Right now it is "only" an engine on top of the libraries. This contribution helps in making the scope of the Falco project broader. Having the majority of the source code under an open governance in the same organization gives the Falco project more contribution opportunities, helps it in evolving independently and makes the whole Falco community a strong owner of the processes and decision making regarding those crucial parts. Given the previous point, Sysdig (the command line tool) will benefit from the now extended contributors base Sysdig (the company) can now focus on the user experience and user space features Contributions to the libraries and drivers will be easier to spread across the Falco community By being donated, with their own release process, release artifacts, and documentation, the libraries can now live on their own and possibly be used directly in other projects by becoming fundamental pieces for their success. There are many sub-projects and each of them interacts in a different way in this contribution. Let's see the goals per sub-project. Extract libsinsp from `draios/sysdig/userspace/libsinsp` (keeping the commit history) into The migration comes first, then we can do additional PRs for the points below so that we do only one thing at a time and keep the history linear Keep the same code, refactorings will need to be done in subsequent PRs and approved separately Adapt the CMake and build files Install and its workflows on it Define the `OWNERS` Owners are chosen from the current major contributors (considering the past two years) to this project, given their availability, commitment is key When possible, migrate issues and PRs to the new repository Distribute the `libsinsp.so` library and headers as an artifact (rpm, deb, tar.gz) following the falcosecurity current process Distribute the `libsinsp.a` library and headers as an artifact (rpm, deb,

following the falcosecurity current process Creation of the CI scripts using the Falco CI and Falco Infra The CI scripts will need to publish the artifacts in the current falcosecurity artifacts repository Artifacts will be pushed for every tag (release) and for every master merge (development release) Falco follows a , in this case we will do an exception since the library is foundational for Falco and it has a very good track record already This project will go already "Official support" once the contribution is completed Contributing, Code of Conduct, Governance, Security, and Support will be the same as the rest of the organization, find them Every other additional change will need to have its own process with a proposal Implement the release process as described above Propose a change to Falco repository to use the artifacts produced by the libsinsp release process for the build Document the API Extract libscap from `draios/sysdig/userspace/libscap` (keeping the commit history) into The migration comes first, then we can do additional PRs for the points below so that we do only one thing at a time and keep the history linear Keep the same code, refactorings will need to be done in subsequent PRs and approved separately Adapt the CMake and build files Install and its workflows on it Define the `OWNERS` Owners are chosen from the current major contributors (considering the past two years) to this project, given their availability, commitment is key When possible, migrate issues and PRs to the new repository Distribute the `libscap.so` library and headers as an artifact (rpm, deb, tar.gz) following the falcosecurity current process Distribute the `libscap.a` library and headers as an artifact (rpm, deb, tar.gz) following the falcosecurity current process Creation of the CI scripts using the Falco CI and Falco Infra The CI scripts will need to publish the artifacts in the current falcosecurity artifacts repository Artifacts will be pushed for every tag (release) and for every master merge (development release) Falco follows a , in this case we will do an exception since the library is foundational for Falco and it has a very good track record already This project will go already "Official support" once the contribution is completed Contributing, Code of Conduct, Governance, Security, and Support will be the same as the rest of the organization, find them Every other additional change will need to have its own process with a proposal Implement the release process as described above Propose a change to Falco repository to use the artifacts produced by the libscap release process for the build Document the API Extract them from `draios/sysdig/driver` (keeping the commit history) into The migration comes first, then we can do additional PRs for the point below so that we do only one thing at a time and keep the history linear Keep the same code, refactorings will need to be done in subsequent PRs and approved separately Adapt the Makefiles and build files Install and its workflows on it Define the `OWNERS` Owners are chosen from the current major contributors (considering the past two years) to this project, given their availability, commitment is key When possible, migrate issues and PRs to the new repository Falco follows a , in this case we will do an exception since the library is foundational for Falco and it has a very good track record already. We are just changing maintenance ownership Contributing, Code of Conduct, Governance, Security, and Support will be the same as the rest of the organization, find them Every other additional change will need to have its own process with a proposal The