Compatibility
Even though kunai has been built to be a single binary compatible with most of the current Linux LTS kernels (from 5.4 to 6.1 at the time of writing) it is possible that the program crashes before it can even start monitoring. If that happens to you do not panic, it does not mean the tool is bad, it just means your kernel is not yet supported, for a reason or another. Having a single binary fitting to several kernels is great for deployment however this has a cost: the programs needs to be aware of some of the changes made between the kernel versions.
If you are interested into getting more knowledge about how kunai makes to supports several kernels at once, you should take a read to the BPF CO-RE reference
In order to get your kernel version, run the following command uname -r, then you can check the following table.
| OS | Kernels |
|---|---|
| Ubuntu-20.04 | 5.4 |
| Ubuntu-22.04 | 5.15 |
| Archlinux | 5.18 to 6.1 |
If your kernel version:
- is between the minimum and maximum kernel version, there are chances it will work without issue
- is higher than the maximum version supported, cross your fingers, it might work
- is lower than the minimum version, it is likely it will fail at running but try anyway you have nothing to lose
Please let us know if you tested kunai with success on an OS/kernel not listed above.
Let us know so that we can update the table