some question about use strace inside container about kubectl-debug

[aylei]

kubectl-debug/pkg/agent/runtime.go

Line 166 in 8fbb788

CapAdd: strslice.StrSlice([]string{"SYS_PTRACE", "SYS_ADMIN"}),

The debug container has SYS_PTRACE capability added already, did you hit a problem about this?

[3JIou]

yes
bash-5.0# ps aux PID USER TIME COMMAND 1 nobody 1d12 /usr/local/bin/binary -c=/config/phpr.toml 31 root 0:00 bash 37 root 0:00 ps aux

bash-5.0# strace -p 1 strace: test_ptrace_get_syscall_info: PTRACE_TRACEME: Operation not permitted strace: attach: ptrace(PTRACE_ATTACH, 1): Operation not permitted

[aylei]

what's the output of kubectl debug --version?

[3JIou]

~/kuber-fdb » kubectl-debug --version
debug version v0.0.0-master+$Format:%h$

[aylei]

@3JIou I see, let me try to reproduce

[aylei]

@3JIou Could you try out v0.2.0-rc?