feat: add post download hook for ebpf agent type

Author: vjripoll

.github/workflows/component_onhost_e2e.yaml

@@ -30,6 +30,7 @@ permissions:
 env:
   HOST_E2E_INFRA_AGENT_VERSION: "1.77.1"
   HOST_E2E_NRDOT_VERSION: "1.17.0"
+  HOST_E2E_EBPF_AGENT_VERSION: "1.4.3"
 
 jobs:
   build-packages:
@@ -81,7 +82,8 @@ jobs:
             --agent-control-version "0.900.${{ github.run_id }}" \
             --recipes-repo-branch "main" \
             --infra-agent-version "${{ env.HOST_E2E_INFRA_AGENT_VERSION }}" \
-            --nrdot-version "${{ env.HOST_E2E_NRDOT_VERSION }}"
+            --nrdot-version "${{ env.HOST_E2E_NRDOT_VERSION }}" \
+            --ebpf-agent-version "${{ env.HOST_E2E_EBPF_AGENT_VERSION }}"
 
       - name: Report test result to New Relic
         if: always()

.github/workflows/on_demand_staging_e2e.yml

@@ -13,6 +13,7 @@ permissions:
 env:
   HOST_E2E_INFRA_AGENT_VERSION: "1.72.4"
   HOST_E2E_NRDOT_VERSION: "1.8.0"
+  HOST_E2E_EBPF_AGENT_VERSION: "1.4.3"
 
 jobs:
   build-packages:
@@ -64,7 +65,8 @@ jobs:
             --agent-control-version "0.600.${{ github.run_id }}" \
             --recipes-repo-branch "main" \
             --infra-agent-version "${{ env.HOST_E2E_INFRA_AGENT_VERSION }}" \
-            --nrdot-version "${{ env.HOST_E2E_NRDOT_VERSION }}"
+            --nrdot-version "${{ env.HOST_E2E_NRDOT_VERSION }}" \
+            --ebpf-agent-version "${{ env.HOST_E2E_EBPF_AGENT_VERSION }}"
 
       - name: Report test result to New Relic
         if: always()

.github/workflows/poc_ebpf.yml

@@ -0,0 +1,97 @@
+name: eBPF PoC Pipeline
+
+# Runs on push to feat/poc_ebpf_package branch and can be triggered manually
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - add-post-download-in-ebpf-agent-type
+      - main
+  pull_request:
+    branches:
+      - add-post-download-in-ebpf-agent-type
+      - main
+  schedule:
+    # Scheduled to run at 4 a.m on every day-of-week from Monday through Friday.
+    - cron: "0 4 * * 1-5"
+
+permissions:
+  contents: read
+
+jobs:
+  build-packages:
+    name: Build packages
+    uses: ./.github/workflows/component_packages.yml
+    with:
+      pre-release: false
+      tag_name: 0.100.${{ github.run_id }}
+    secrets:
+      gh_token: ${{ secrets.GITHUB_TOKEN }}
+      gpg_private_key_base64: ${{ secrets.OHAI_GPG_PRIVATE_KEY_BASE64 }}
+      gpg_passphrase: ${{ secrets.OHAI_GPG_PASSPHRASE }}
+      pfx_certificate_base64: ${{ secrets.OHAI_PFX_CERTIFICATE_BASE64 }}
+      pfx_passphrase: ${{ secrets.OHAI_PFX_PASSPHRASE }}
+
+  build-image:
+    name: Build and Push nightly image
+    uses: ./.github/workflows/component_image.yml
+    with:
+      # the packages are created with 0.100.run_id, however we still push the image with nightly
+      image-tag: nightly
+      ac-version: nightly
+      push: true
+    secrets: inherit
+
+  security-image:
+    name: Security scan
+    needs: [ build-image ]
+    uses: ./.github/workflows/component_image_security.yml
+    with:
+      # the packages are created with 0.100.run_id, however we still push the image with nightly
+      image-tag: nightly
+    secrets: inherit
+
+  security-source-code:
+    uses: ./.github/workflows/component_security.yml
+
+  # This is currently required for canaries
+  upload-packages-s3:
+    runs-on: ubuntu-latest
+    needs: [ build-packages ]
+    name: Upload packages to testing bucket
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          fetch-depth: 0
+
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: built-binaries-0.100.${{ github.run_id }}
+          path: ./
+
+      - name: Publish deb to S3 action
+        uses: newrelic/infrastructure-publish-action@26d9d8604b2cf2e7343dc287c958e8bbc1a3f750 # v1
+        with:
+          tag: 0.100.${{ github.run_id }}
+          app_name: "newrelic-agent-control"
+          repo_name: ${{ github.repository }}
+          schema: "custom-local"
+          schema_path: "/srv/build/upload-schema-linux-deb-nightly.yml"
+          aws_access_key_id: ${{ secrets.OHAI_AWS_ACCESS_KEY_ID_TESTING }}
+          aws_secret_access_key: ${{ secrets.OHAI_AWS_SECRET_ACCESS_KEY_TESTING }}
+          aws_s3_bucket_name: "nr-downloads-ohai-testing"
+          aws_s3_lock_bucket_name: "onhost-ci-lock-testing"
+          access_point_host: "testing"
+          run_id: ${{ github.run_id }}
+          aws_region: "us-east-1"
+          aws_role_session_name: ${{ secrets.OHAI_AWS_ROLE_SESSION_NAME_TESTING }}
+          aws_role_arn: ${{ secrets.OHAI_AWS_ROLE_ARN_TESTING }}
+          # used for signing package stuff
+          gpg_passphrase: ${{ secrets.OHAI_GPG_PASSPHRASE }}
+          gpg_private_key_base64: ${{ secrets.OHAI_GPG_PRIVATE_KEY_BASE64 }} # base64 encoded
+          disable_lock: false
+          dest_prefix: "poc_ebpf/"
+          local_packages_path: "/srv/dist/"
+          apt_skip_mirror: true
+

agent-control/agent-type-registry/newrelic/host-linux-com.newrelic.ebpf-0.1.0.yaml

@@ -205,8 +205,32 @@ variables:
     type: bool
     required: false
     default: false
+  oci:
+    repository:
+      description: "Package repository name"
+      type: string
+      required: false
+      default: vjripoll/newrelic-agent-control-poc
+      variants:
+        ac_config_field: "oci_repository_urls"
+        values: [ "vjripoll/newrelic-agent-control-poc" ]
+  version:
+    description: "Agent version"
+    type: string
+    required: true
 deployment:
   enable_file_logging: ${nr-var:enable_file_logging}
+  packages:
+    ebpf-agent:
+      download:
+        oci:
+          repository: ${nr-var:oci.repository}
+          version: ${nr-var:version}
+          # public_key_url removed for manual POC test (image in ghcr.io/vjripoll is unsigned) — REVERT before merge
+      post_download_hook:
+        path: /bin/bash
+        args:
+          - post_download.sh
   executables:
     - id: nr-ebpf-agent-client
       path: /usr/bin/nr-ebpf-agent-client

test/e2e-runner/src/common.rs

@@ -89,6 +89,10 @@ pub struct InstallationArgs {
     /// Version of the NRDot OCI image to use in tests
     #[arg(long)]
     pub nrdot_version: Option<String>,
+
+    /// Version of the eBPF agent OCI image to use in tests
+    #[arg(long)]
+    pub ebpf_agent_version: Option<String>,
 }
 
 /// Arguments for Fleet Control scenarios that also install Agent Control

test/e2e-runner/src/linux/scenarios/ebpf_agent.rs

@@ -21,6 +21,11 @@ pub fn test_ebpf_agent(args: InstallationArgs) {
         .clone()
         .expect("--infra-agent-version is required for this scenario");
 
+    let ebpf_version = args
+        .ebpf_agent_version
+        .clone()
+        .expect("--ebpf-agent-version is required for this scenario");
+
     let staging = args.nr_region == Region::Staging;
 
     let recipe_data = RecipeData {
@@ -59,13 +64,15 @@ agents:
 config_agent:
   DEPLOYMENT_NAME: {test_id}
   OTLP_ENDPOINT: staging-otlp.nr-data.net:443
+version: {ebpf_version}
     "#
         )
     } else {
         format!(
             r#"
 config_agent:
   DEPLOYMENT_NAME: {test_id}
+version: {ebpf_version}
     "#
         )
     };