Merge pull request #4019 from DataDog/tonycthsu/denylist

Implement `requirement.json` for injection

.gitlab-ci.yml

@@ -115,6 +115,13 @@ package-oci:
     - build-gem
     - install-dependencies
 
+requirements_json_test:
+  rules:
+    - when: on_success
+  variables:
+    REQUIREMENTS_BLOCK_JSON_PATH: "lib-injection/test_block.json"
+    REQUIREMENTS_ALLOW_JSON_PATH: "lib-injection/test_allow.json"
+
 onboarding_tests_installer:
   parallel:
     matrix:

.gitlab/prepare-oci-package.sh

@@ -5,6 +5,7 @@ set -e
 mkdir sources
 
 cp ../lib-injection/host_inject.rb sources
+cp ../lib-injection/requirements.json sources/requirements.json
 # Kubernetes injection expects a different path
 ln -rs sources/host_inject.rb sources/auto_inject.rb
 

lib-injection/requirements.json

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://raw.githubusercontent.com/DataDog/auto_inject/refs/heads/main/preload_go/cmd/library_requirements_tester/testdata/requirements_schema.json",
+  "version": 1,
+  "native_deps": {
+    "glibc": [
+      {
+        "arch": "x86",
+        "supported": true,
+        "min": "2.27",
+        "description": "libffi needs memfd_create"
+      },
+      {
+        "arch": "arm64",
+        "supported": true,
+        "min": "2.27",
+        "description": "libffi needs memfd_create"
+      }
+    ],
+    "musl": [
+      {
+        "arch": "x86",
+        "supported": false,
+        "description": "no musl build"
+      },
+      {
+        "arch": "arm64",
+        "supported": false,
+        "description": "no musl build"
+      }
+    ]
+  },
+  "deny": []
+}

lib-injection/test_allow.json

@@ -0,0 +1,4 @@
+[
+  {"name": "✅ 2.27 glibc x86"  ,"filepath":  "/some/path", "args": [], "envars":  [], "host": {"os": "linux", "arch": "x86"  , "libc":  "glibc:2.27"}},
+  {"name": "✅ 2.27 glibc arm64","filepath":  "/some/path", "args": [], "envars":  [], "host": {"os": "linux", "arch": "arm64", "libc":  "glibc:2.27"}}
+]

lib-injection/test_block.json

@@ -0,0 +1,4 @@
+[
+  {"name": "❌ 2.26 glibc x86"  ,"filepath":  "/some/path", "args": [], "envars":  [], "host": {"os": "linux", "arch": "x86"  , "libc":  "glibc:2.26"}},
+  {"name": "❌ 2.26 glibc arm64","filepath":  "/some/path", "args": [], "envars":  [], "host": {"os": "linux", "arch": "arm64", "libc":  "glibc:2.26"}}
+]