Agent installation on Debian 12 failed (failed to find executables) about ansible_collection_falcon HOT 8 CLOSED

@D1Ck3n did you run the falcon_install role first? If you haven't, that is the role that actually installs the falcon sensor. Once the sensor is installed, then you can configure it accordingly with the falcon_configure role.

from ansible_collection_falcon.

hi @carlosmmatos

maybe i add the whole debug of my ansible play:

https://gist.github.com/D1Ck3n/866088edc2a8e3a88d35dc47bafd876c

It works fine on other distributions, like Ubuntu 22.04, RHEL8, RHEL9 and Debian 11

just Debian 12 does not work

from ansible_collection_falcon.

Ahh got it - thanks for the gist and yes, sorry I should have led with Debian 12 is still not supported. Docs are here: https://falcon.us-2.crowdstrike.com/documentation/20/falcon-sensor-for-linux#kernel-mode-operating-systems

Currently still 9/10/11

from ansible_collection_falcon.

oh okay, thanks for the info! is there some ETA when it will be supported?

from ansible_collection_falcon.

I've got no idea. But I hope soon enough as more and more Cx's request support for it.

from ansible_collection_falcon.

would it be possible to "fool" the role into installing CS on Debian 11 or Ubuntu 22.04? That would be a temp. workaround.

  vars:
    falcon_target_os: "Debian"
    falcon_os_version: "*11*"
    falcon_os_vendor: "debian"

from ansible_collection_falcon.

Yes you can do that - just know that if you have any issues with those hosts (ie, incorrect data showing up, false positives, etc) then there is not much CS can do to help since it's not supported in that configuration. But it should install and most likely put you into eBPF mode.

from ansible_collection_falcon.

@D1Ck3n going to go ahead and close this since there is no work that needs to be done from the project side. Once Debian 12 is supported by CS, this should work just fine. Feel free to re-open later down the road or open a new issue if you run into any other problems.

from ansible_collection_falcon.