Skip to content

Falco doesn't work on (some) of my raspberry pis #2028

Description

@2br-2b

Describe the bug

Hello! First off, thank you so much for this great tool!

I'm trying to run this on some raspberry pis, and it works on some but not on others. I'm running a Kubernetes k3s homelab.

How to reproduce it

I've attached my logs and my yaml

falco-2mjcr.log

falco-values.yaml

Expected behavior

Falco pods work fine on all my machines

Environment

  • Falco version:
  • System info: Run on another pod:
falco --version
Fri May 22 03:41:28 2026: Falco version: 0.43.1 (x86_64)
Fri May 22 03:41:28 2026: Falco initialized with configuration files:
Fri May 22 03:41:28 2026:    /etc/falco/config.d/engine-kind-falcoctl.yaml | schema validation: ok
Fri May 22 03:41:28 2026:    /etc/falco/falco.yaml | schema validation: ok
Fri May 22 03:41:28 2026: System info: Linux version 6.1.0-37-amd64 (debian-kernel@lists.debian.org) (gcc-12 (Debian 12.
2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC Debian 6.1.140-1 (2025-05-22)
{"default_driver_version":"9.1.0+driver","driver_api_version":"8.0.0","driver_schema_version":"4.1.0","engine_version":"
58","engine_version_semver":"0.58.0","falco_version":"0.43.1","libs_version":"0.23.2","plugin_api_version":"3.12.0"}
  • Cloud provider or hardware configuration: Raspberry Pi (aarch64)
  • OS:
  PRETTY_NAME="Debian GNU/Linux 13 (trixie)"
  NAME="Debian GNU/Linux"
  VERSION_ID="13"
  VERSION="13 (trixie)"
  VERSION_CODENAME=trixie
  DEBIAN_VERSION_FULL=13.3
  ID=debian
  • Kernel:
  Linux damian 6.12.47+rpt-rpi-v8 #1 SMP PREEMPT Debian 1:6.12.47-1+rpt1 (2025-09-16) aarch64 GNU/Linux
  • Installation method:
    Kubernetes (Helm chart, falcosecurity/falco)

Additional context

Thank you so much for this tool!

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions