landlock-genprof abi check
Reports the highest Landlock ABI level a kernel version supports
Synopsis
Reports the highest Landlock ABI level a kernel version supports, per this project’s documented kernel-version table — an approximation, not the authoritative detection method (a live kernel’s real ABI level is only truly known via landlock_create_ruleset(NULL, 0, LANDLOCK_CREATE_RULESET_VERSION), which correctly reports backported support this table can’t predict). Useful for planning against a kernel you’re not currently running on — a fleet’s node-pool version, for instance.
Installed as a kubectl plugin (the common case): run this as kubectl landlock-genprof <command>. Running this binary directly instead (standalone, not via kubectl) works the same way, without that prefix.
landlock-genprof abi check [flags]
Examples
kubectl landlock-genprof abi check --kernel 6.2
kubectl landlock-genprof abi check # checks the local host
Options
-h, --help help for check
--kernel string Kernel version to check (e.g. 6.2); defaults to the local host's
SEE ALSO
- landlock-genprof abi - Inspects Landlock’s ABI-versioned right vocabulary