kubeshark CLI installation failed (CAP_CHECKPOINT_RESTORE kernel version incompatibility)

[chrinly]

docker version : 19.03.9
kubernetes version : 1.18.6

I use the CLI to install,This is the worker build error log

Error: Error response from daemon: invalid CapAdd: unknown capability: "CAP_CHECKPOINT_RESTORE"

Hopefully it will be resolved,This will help me tremendously

[lplazas]

What OS are you trying to install the CLI on?

[RafPe]

I can confirm that I experience the same on EKS. Node versions on 1.18

[alongir]

It appears this can cause a problem with certain kernel versions. We don't have the full details yet, but we'll probably fix it in the next few days.

[chrinly]

What OS are you trying to install the CLI on?

I installed in centos 73.9
kernel version is 3.1

[chrinly]

It appears this can cause a problem with certain kernel versions. We don't have the full details yet, but we'll probably fix it in the next few days.

Thank you very much for your reply. I hope the new version can solve my problem

[alongir]

For now, do this: --set tap.serviceMesh=false --set tap.tls=false

[taylorsmithgg]

Also experiencing Error: Error response from daemon: invalid CapAdd: unknown capability: "CAP_CHECKPOINT_RESTORE"

For now, do this: --set tap.serviceMesh=false --set tap.tls=false

These flags result in a CrashLoopBackOff in EKS v1.23.17

2024-01-04T18:13:39Z INF source/packet_source_manager.go:167 > Too many pods for setting ebpf filter 388, setting just not 443
2024-01-04T18:13:39Z INF source/packet_source_manager.go:173 > Setting pcap bpf filter port not 443

[RafPe]

So today I got kubeshark running - without making any other modifications into my platform setup.

❯ kubectl version
Client Version: v1.28.3
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.21.14-eks-8cb36c9
❯ k get nodes
NAME                                         STATUS   ROLES    AGE      VERSION
ip-*****.compute.internal    Ready    <none>   2y302d   v1.18.9-eks-d1db3c
ip-*****.compute.internal    Ready    <none>   2y205d   v1.18.9-eks-d1db3c
ip-*****.compute.internal    Ready    <none>   566d     v1.18.9-eks-d1db3c
ip-*****.compute.internal   Ready    <none>   2y302d   v1.18.9-eks-d1db3c
ip-*****.compute.internal   Ready    <none>   2y205d   v1.18.9-eks-d1db3c
ip-*****.compute.internal    Ready    <none>   2y302d   v1.18.9-eks-d1db3c
ip-*****.compute.internal   Ready    <none>   2y302d   v1.18.9-eks-d1db3c
ip-*****.compute.internal    Ready    <none>   2y302d   v1.18.9-eks-d1db3c

[rafaelmnatali]

--set tap.serviceMesh=false --set tap.tls=false

Was trying to install on macOS Sonoma 14.2.1 (M2) and managed to install using:

helm upgrade --install kubeshark kubeshark/kubeshark --set tap.serviceMesh=false --set tap.tls=false