Views:
Note
Note
  • Container Security Helm version 2.3.14 added support for the modern Berkeley Packet Filter (BPF), also known as eBPF CO-RE (Compile Once, Run Everywhere). This allows Container Security to support any Linux kernel version 5.8 or later, as long as the BTF types are exposed.
  • If you are using runtime scanning in an ECS instance, you must use a kernel whose version is 5.8 or later.
The following is a non-exclusive list of the kernel version flavors supported by Container Security.
Platform
Major minor version
Flavor
Amazon Linux 2
4.14.x
Amazon Linux 2
5.4.x
Amazon Linux 2
5.10.x
Amazon Linux 2
5.15.x
Red Hat Enterprise Linux CoreOS (RHCOS)
4.18.x
Ubuntu
4.15.x
generic
Ubuntu
5.4.x
generic
Ubuntu
5.4.x
azure
Ubuntu
5.4.x
aws
Ubuntu
5.4.x
gke
Ubuntu
5.11.x
generic
Ubuntu
5.11.x
azure
Ubuntu
5.11.x
aws
Google Container-Optimized OS (COS)
5.4.x
Google Container-Optimized OS (COS)
5.10.x
Debian 11
5.10.x
generic
Bottlerocket
5.10.x