Function Run

pkg/app/sensor/app.go:120–199

Run starts the sensor app

()

// Run starts the sensor app
func Run() {
	flag.Parse()

	if *getAppBom {
		dumpAppBom()
		return
	}

	errutil.FailOn(configureLogger(*enableDebug, *logLevel, *logFormat, *logFile))
	ctx := context.Background()
	if len(os.Args) > 1 && os.Args[1] == "control" {
		if err := runControlCommand(ctx); err != nil {
			fmt.Fprintln(os.Stderr, "Control command failed: "+err.Error())
			os.Exit(1)
		}
		return
	}

	activeCaps, maxCaps, err := sysenv.Capabilities(0)
	errutil.WarnOn(err)

	sr := &report.SensorReport{
		Version: version.Current(),
		Args:    os.Args,
	}

	log.Infof("sensor: ver=%v", sr.Version)
	log.Debugf("sensor: args => %#v", sr.Args)

	log.Tracef("sensor: uid=%v euid=%v", os.Getuid(), os.Geteuid())
	log.Tracef("sensor: privileged => %v", sysenv.IsPrivileged())
	log.Tracef("sensor: active capabilities => %#v", activeCaps)
	log.Tracef("sensor: max capabilities => %#v", maxCaps)
	log.Tracef("sensor: sysinfo => %#v", system.GetSystemInfo())
	log.Tracef("sensor: kernel flags => %#v", system.DefaultKernelFeatures.Raw)

	var artifactsExtra []string
	if len(*commandsFile) > 0 {
		artifactsExtra = append(artifactsExtra, *commandsFile)
	}
	if len(*logFile) > 0 {
		artifactsExtra = append(artifactsExtra, *logFile)
	}
	artifactor := artifact.NewProcessor(sr, *artifactsDir, artifactsExtra)

	exe, err := newExecution(
		ctx,
		*sensorMode,
		*commandsFile,
		eventsFilePath(),
		*lifecycleHookCommand,
	)
	if err != nil {
		errutil.WarnOn(artifactor.Archive())
		errutil.FailOn(err) // calls os.Exit(1)
	}

	mondelFile := filepath.Join(*artifactsDir, report.DefaultMonDelFileName)