Kernel version \"5.4.257-1.el7.elrepo.x86_64\" BTF search failed kernel is not included in supported list

[yunzck8s]

What happened?

1. I use helm deploy the tetragon
2. helm install tetragon cilium/tetragon -n kube-system
3. with erros
   Failed to start tetragon" error="tetragon, aborting kernel autodiscovery failed: Kernel version "5.4.257-1.el7.elrepo.x86_64" BTF search failed kernel is not included in supported list. Please check Tetragon requirements documentation, then use --btf option to specify BTF path and/or '--kernel' to specify kernel version
4. https://tetragon.io/docs/faq/#what-is-the-minimum-linux-kernel-version-to-run-tetragon

Tetragon Version

v0.11.0

Kernel Version

[root@master ~]# uname -a
Linux master 5.4.257-1.el7.elrepo.x86_64 #1 SMP Sat Sep 23 07:34:32 EDT 2023 x86_64 x86_64 x86_64 GNU/Linux

Kubernetes Version

[root@master ~]# kubectl get node
NAME STATUS ROLES AGE VERSION
master Ready control-plane 27d v1.28.2
node Ready 27d v1.28.2

Bugtool

No response

Relevant log output

time="2023-11-07T03:18:24Z" level=info msg="Loaded config from directory" config-dir=/etc/tetragon/tetragon.conf.d/
time="2023-11-07T03:18:24Z" level=info msg="Starting gops server" addr="localhost:8118"
time="2023-11-07T03:18:24Z" level=info msg="Starting tetragon" version=v0.11.0
time="2023-11-07T03:18:24Z" level=info msg="config settings" config="map[bpf-lib:/var/lib/tetragon/ btf: cilium-bpf: config-dir:/etc/tetragon/tetragon.conf.d/ config-file: cpuprofile: data-cache-size:1024 debug:false disable-kprobe-multi:false enable-cilium-api:false enable-export-aggregation:false enable-k8s-api:true enable-msg-handling-latency:false enable-pid-set-filter:false enable-policy-filter:false enable-policy-filter-debug:false enable-process-ancestors:true enable-process-cred:false enable-process-ns:false event-queue-size:10000 export-aggregation-buffer-size:10000 export-aggregation-window-size:15s export-allowlist:{\"event_set\":[\"PROCESS_EXEC\", \"PROCESS_EXIT\", \"PROCESS_KPROBE\", \"PROCESS_UPROBE\"]} export-denylist:{\"health_check\":true}\n{\"namespace\":[\"\", \"cilium\", \"kube-system\"]} export-file-compress:false export-file-max-backups:5 export-file-max-size-mb:10 export-file-rotation-interval:0s export-filename:/var/run/cilium/tetragon/tetragon.log export-rate-limit:-1 field-filters:{} force-large-progs:false force-small-progs:false gops-address:localhost:8118 k8s-kubeconfig-path: kernel: kmods:[] log-format:text log-level:info memprofile: metrics-server::2112 netns-dir:/var/run/docker/netns/ pprof-addr: process-cache-size:65536 procfs:/procRoot rb-size:0 rb-size-total:0 release-pinned-bpf:true server-address:localhost:54321 tracing-policy: tracing-policy-dir:/etc/tetragon/tetragon.tp.d verbose:0]"
time="2023-11-07T03:18:24Z" level=info msg="BPF: successfully released pinned BPF programs and maps" bpf-dir=/sys/fs/bpf/tetragon
time="2023-11-07T03:18:24Z" level=info msg="BTF discovery: default kernel btf file does not exist" btf-file=/sys/kernel/btf/vmlinux
time="2023-11-07T03:18:24Z" level=info msg="sensor controller waiting on channel"
time="2023-11-07T03:18:24Z" level=info msg="BTF discovery: candidate btf file does not exist" btf-file=/var/lib/tetragon/metadata/vmlinux-5.4.257-1.el7.elrepo.x86_64
time="2023-11-07T03:18:24Z" level=info msg="BTF discovery: candidate btf file does not exist" btf-file=/var/lib/tetragon/btf
time="2023-11-07T03:18:24Z" level=info msg="BPF events statistics: 0 received, 0% events loss"
time="2023-11-07T03:18:24Z" level=info msg="Observer events statistics" errors=0 filterDrop=0 filterPass=0 lost=0 received=0
time="2023-11-07T03:18:24Z" level=fatal msg="Failed to start tetragon" error="tetragon, aborting kernel autodiscovery failed: Kernel version \"5.4.257-1.el7.elrepo.x86_64\" BTF search failed kernel is not included in supported list. Please check Tetragon requirements documentation, then use --btf option to specify BTF path and/or '--kernel' to specify kernel version"

Anything else?

No response

[kkourt]

Hi,

Please have a look at Tetragon's respective FAQ entry: https://tetragon.io/docs/faq/#tetragon-failed-to-start-complaining-about-a-missing-btf-file

[yunzck8s]

@kkourt Thanks!