Tested on falcosecurity/falco#968
pacman -S gcc cmake make pkgconfig autoconf automake patch elfutils libelf libtool linux-headers jq oniguruma zlib ncurses yaml-cpp openssl curl c-ares protobuf grpc libyaml
mkdir falco_build
cd falco_build
git clone https://github.com/draios/sysdig.git
git clone https://github.com/falcosecurity/falco.git
cd falco
mkdir build
cd build
cmake ..
make -j8 all
To load the locally built version, assuming you are in the build
dir, use:
insmod driver/falco-probe.ko