Fail to start up with: Failed to probe tracepoint

[jpmeijers]

Running parca-agent in Docker on Unraid 7.0.0-beta.2.

# uname -a
Linux Magda 6.8.12-Unraid #3 SMP PREEMPT_DYNAMIC Tue Jun 18 07:52:57 PDT 2024 x86_64 Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz GenuineIntel GNU/Linux

The container exits soon after startup due to it not finding /sys/kernel/debug/tracing/events/syscalls/sys_enter_mmap/id.

parca-agent-1  | time="2024-09-03T07:36:39Z" level=error msg="Failed to probe tracepoint: failed to get id for tracepoint: failed to read tracepoint ID for sys_enter_mmap: open /sys/kernel/debug/tracing/events/syscalls/sys_enter_mmap/id: no such file or directory"
parca-agent-1  | time="2024-09-03T07:36:39Z" level=error msg="======================= unexpected error ======================="
parca-agent-1  | time="2024-09-03T07:36:39Z" level=error msg="time=\"2024-09-03T07:36:39Z\" level=error msg=\"Failed to probe tracepoint: failed to get id for tracepoint: failed to read tracepoint ID for sys_enter_mmap: open /sys/kernel/debug/tracing/events/syscalls/sys_enter_mmap/id: no such file or directory\"\n"
parca-agent-1  | time="2024-09-03T07:36:39Z" level=error msg="================================================================"
parca-agent-1  | time="2024-09-03T07:36:39Z" level=error msg="about to report error to server"
parca-agent-1  | time="2024-09-03T07:36:39Z" level=info msg="report sent successfully"
parca-agent-1 exited with code 2

Looking at the host, the kernel debugfs is mounted, but the syscalls directory does not exist.

# ls /sys/kernel/debug/tracing/events/
9p/            cgroup/      devlink/       filelock/     huge_memory/  iommu/        kvmmmu/      migrate/    netlink/         percpu/        rpm/     sock/     tlb/        writeback/
alarmtimer/    clk/         dma_fence/     filemap/      hwmon/        ipi/          kyber/       mmap/       nmi/             power/         rseq/    swiotlb/  tls/        x86_fpu/
amd_cpu/       cma/         drm/           fs_dax/       hyperv/       irq/          libata/      mmap_lock/  notifier/        printk/        rtc/     target/   udp/        xdp/
block/         compaction/  enable         ftrace/       i2c/          irq_matrix/   lock/        module/     nvme/            qdisc/         sched/   task/     vmalloc/    xfs/
bpf_test_run/  cpuhp/       error_report/  gpio/         initcall/     irq_vectors/  maple_tree/  msr/        oom/             ras/           scsi/    tcp/      vmscan/     xhci-hcd/
bpf_trace/     csd/         exceptions/    handshake/    intel_iommu/  kmem/         mce/         napi/       page_isolation/  raw_syscalls/  signal/  thermal/  vsyscall/
bridge/        dev/         fib/           header_event  io_uring/     ksm/          mdio/        neigh/      page_pool/       rcu/           skb/     thp/      wbt/
btrfs/         devfreq/     fib6/          header_page   iomap/        kvm/          mei/         net/        pagemap/         regmap/        smbus/   timer/    workqueue/

[umanwizard]

Hi @jpmeijers ,

Can you please check if your kernel was compiled with CONFIG_HAVE_SYSCALL_TRACEPOINTS=y ?

[umanwizard]

Same question for CONFIG_FTRACE_SYSCALLS

[umanwizard]

Possibly, this is fixed by #2990

[umanwizard]

Presumably related: evilsocket/opensnitch#774

[umanwizard]

@jpmeijers , can you please try again with the most recent image? ghcr.io/parca-dev/parca-agent:main-48f7888d