feat: print debug runtime information

extruntime/extruntime.go

@@ -0,0 +1,19 @@
+package extruntime
+
+import (
+	"github.com/rs/zerolog"
+	"github.com/rs/zerolog/log"
+	"os"
+	"runtime"
+)
+
+func LogRuntimeInformation(level zerolog.Level) {
+	if !log.WithLevel(level).Enabled() {
+		return
+	}
+
+	log.WithLevel(level).Msgf("Go Runtime information: os=%s; arch=%s", runtime.GOOS, runtime.GOARCH)
+	log.WithLevel(level).Msgf("Process information: pid=%d; uid=%d; gid=%d", os.Getpid(), os.Getuid(), os.Getgid())
+	logCapsInformation(level)
+	logSeccompInformation(level)
+}

extruntime/extruntime_darwin.go

@@ -0,0 +1,13 @@
+//go:build darwin
+
+package extruntime
+
+import (
+	"github.com/rs/zerolog"
+)
+
+func logCapsInformation(_ zerolog.Level) {
+}
+
+func logSeccompInformation(_ zerolog.Level) {
+}

extruntime/extruntime_linux.go

@@ -0,0 +1,42 @@
+//go:build linux
+
+package extruntime
+
+import (
+	"github.com/rs/zerolog"
+	"github.com/rs/zerolog/log"
+	"github.com/seccomp/libseccomp-golang"
+	"os"
+	"os/exec"
+	"strconv"
+)
+
+func logCapsInformation(level zerolog.Level) {
+	caps, err := exec.Command("getpcaps", strconv.Itoa(os.Getpid())).CombinedOutput()
+	if err != nil {
+		log.WithLevel(level).Msgf("Process capabilities: %s", string(caps))
+	} else {
+		log.WithLevel(level).Msgf("Process capabilities: %s", err)
+	}
+}
+func logSeccompInformation(level zerolog.Level) {
+	ctx, err := seccomp.NewContext(seccomp.ActLog)
+	if err != nil {
+		log.WithLevel(level).Msgf("Seccomp: %s", err)
+		return
+	}
+	defer ctx.Release()
+
+	if err := ctx.Load(); err != nil {
+		log.WithLevel(level).Msgf("Seccomp: %s", err)
+		return
+	}
+
+	mode, err := ctx.GetMode()
+	if err != nil {
+		log.WithLevel(level).Msgf("Seccomp: %s", err)
+		return
+	}
+
+	log.WithLevel(level).Msgf("Seccomp: mode=%s", err)
+}