Deploy cryptnono

[yuvipanda]

cryptnono (https://github.com/yuvipanda/cryptnono/) is a
helm chart that uses bpftrace
to detect monero mining and kill all processes that mine monero
instantly. It is based off this blog
post
and installs a daemonset.

This is in addition to our minesweeper program, and focused
specifically on monero.

Ref jupyterhub/team-compass#514

[yuvipanda]

/cc @minrk

[minrk]

/test-this-pr

[sgibson91]

This Pull Request is now being tested 🎉 See the test progress in GitHub Actions.

[sgibson91]

Job status: success
Branch 'test-this-pr/2171' has been deleted

[minrk]

It didn't crash on staging, so merging!

[minrk]

Works on GKE, but fails on azure and ovh:

azure:

+ echo 'WARNING: Cannot find distro-specific headers for "Ubuntu". Fetching generic headers.'
+ install_generic_linux_headers
WARNING: Cannot find distro-specific headers for "Ubuntu". Fetching generic headers.
+ BUILD_DIR=/linux-generic-5.4.0-1074-azure
+ SOURCES_DIR=/usr/src/linux-generic-5.4.0-1074-azure
+ [[ ! -e /usr/src/linux-generic-5.4.0-1074-azure/.installed ]]
+ echo 'Installing kernel headers for generic kernel'
+ fetch_generic_linux_sources
Installing kernel headers for generic kernel
++ awk '-vFS=[-+]' '{ print $1 }'
++ echo 5.4.0-1074-azure
+ kernel_version=5.4.0
++ awk -vFS=. '{ print $1 }'
++ echo 5.4.0-1074-azure
+ major_version=5
+ [[ 5.4.0 == *.0 ]]
++ rev
++ sed s/0.//
++ rev
++ echo 5.4.0
Fetching upstream kernel sources for 5.4.
+ kernel_version=5.4
+ echo 'Fetching upstream kernel sources for 5.4.'
+ mkdir -p /linux-generic-5.4.0-1074-azure
+ curl -sL https://www.kernel.org/pub/linux/kernel/v5.x/linux-5.4.tar.gz
+ tar --strip-components=1 -xzf - -C /linux-generic-5.4.0-1074-azure
tar: invalid magic
tar: short read

ovh:

+ echo 'WARNING: Cannot find distro-specific headers for "Ubuntu". Fetching generic headers.'
+ install_generic_linux_headers
+ BUILD_DIR=/linux-generic-4.15.0-166-generic
+ SOURCES_DIR=/usr/src/linux-generic-4.15.0-166-generic
+ [[ ! -e /usr/src/linux-generic-4.15.0-166-generic/.installed ]]
+ echo 'Installing kernel headers for generic kernel'
+ fetch_generic_linux_sources
WARNING: Cannot find distro-specific headers for "Ubuntu". Fetching generic headers.
Installing kernel headers for generic kernel
++ echo 4.15.0-166-generic
++ awk '-vFS=[-+]' '{ print $1 }'
+ kernel_version=4.15.0
++ echo 4.15.0-166-generic
++ awk -vFS=. '{ print $1 }'
+ major_version=4
+ [[ 4.15.0 == *.0 ]]
++ echo 4.15.0
++ rev
++ sed s/0.//
++ rev
+ kernel_version=4.15
Fetching upstream kernel sources for 4.15.
+ echo 'Fetching upstream kernel sources for 4.15.'
+ mkdir -p /linux-generic-4.15.0-166-generic
+ curl -sL https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.15.tar.gz
+ tar --strip-components=1 -xzf - -C /linux-generic-4.15.0-166-generic
tar: invalid magic
tar: short read

[yuvipanda]

@minrk \o/ ty ty. I've opened iovisor/kubectl-trace#184 and iovisor/kubectl-trace#185 to try get the fetch-headers stuff fixed.