@timb by the way, I quickly tested and I have only 2 tests failing, the ebpf one and filesystem; for filesystem specifically:

FileOpsTests.test_chmod_no_read
FileOpsTests.test_chmod_no_write
FileOpsTests.test_access
FileOpsTests.test_zero_permissions_file
FilesystemTests.test_write_file

Hi @Stefano Bonicatti I have those tests failing for me as well since I have got osquery 4.1.2. Do you by any chance recall why those tests are failing? on my side I am running the compilation and the tests inside a container with Ubuntu18.04. thanks

Are you running the tests with root? Because Linux tests expect to be run as a normal user. Moreover, we use too a Docker container on the CI to run the build and tests, you can see that we run it as a privileged container because it needs access to special paths and kernel features.

not sure about the Docker if it is running in privileged mode. need to check. locally though (on arch linux) I have different failing tests

augeas

(I think because the table is disabled if it makes sense),

mounts and osVersion sanity checks

, and

SystemsTablesTests.test_processes_disk_io

. still investigating why though.

Do you still have the same tests failing anyway? In any case, could you open an issue about it?

yes same tests. locally and in the container (after mounting

/dev

and adding

privileged

to the container). ok I will. I have also tests failing on mac and windows, but I will double check before opening tickets. Thank you