[FIX][CHAOS] Fix disk-failure cgroupv2 filtering and relative-path disruption

LICENSE-3rdparty.csv

@@ -197,7 +197,6 @@ github.com/Microsoft/hcsshim,github.com/Microsoft/hcsshim/internal/winapi,MIT
 github.com/Microsoft/hcsshim,github.com/Microsoft/hcsshim/osversion,MIT
 github.com/Microsoft/hcsshim,github.com/Microsoft/hcsshim/pkg/ociwclayer,MIT
 github.com/aquasecurity/libbpfgo,github.com/aquasecurity/libbpfgo,Apache-2.0
-github.com/aquasecurity/libbpfgo/helpers,github.com/aquasecurity/libbpfgo/helpers,Apache-2.0
 github.com/avast/retry-go,github.com/avast/retry-go,MIT
 github.com/beorn7/perks,github.com/beorn7/perks/quantile,MIT
 github.com/cenkalti/backoff,github.com/cenkalti/backoff,MIT

bin/injector/Dockerfile

@@ -85,7 +85,7 @@ FROM gcr.io/distroless/python3-debian13:latest
 ARG TARGETARCH
 
 # binaries used by the chaos-injector, ran as commmands
-COPY --from=binaries /usr/bin/uname /usr/bin/df /usr/bin/ls /usr/bin/test /usr/bin/
+COPY --from=binaries /usr/bin/uname /usr/bin/bash /usr/bin/ls /usr/bin/cat /usr/bin/df /usr/bin/ls /usr/bin/test /usr/bin/
 COPY --from=binaries /usr/sbin/iptables /usr/sbin/
 COPY --from=binaries /usr/sbin/tc /sbin/tc
 COPY --from=binaries /usr/bin/bpftool-${TARGETARCH} /usr/bin/bpftool

builderstest/chaospod.go

@@ -292,6 +292,10 @@ func (b *ChaosPodBuilder) WithChaosSpec(targetNodeName string, terminationGraceP
 								MountPath: "/boot",
 								ReadOnly:  true,
 							},
+							{
+								Name:      "tracefs",
+								MountPath: "/mnt/tracefs",
+							},
 						},
 					},
 				},
@@ -359,6 +363,15 @@ func (b *ChaosPodBuilder) WithChaosSpec(targetNodeName string, terminationGraceP
 							},
 						},
 					},
+					{
+						Name: "tracefs",
+						VolumeSource: v1.VolumeSource{
+							HostPath: &v1.HostPathVolumeSource{
+								Path: "/sys/kernel/debug/tracing",
+								Type: &hostPathDirectory,
+							},
+						},
+					},
 				},
 			}
 		})

cgroup/manager.go

@@ -30,6 +30,10 @@ type Manager interface {
 	IsCgroupV2() bool
 	// RelativePath returns the controller relative path
 	RelativePath(controller string) string
+	// CgroupV2Path returns the absolute cgroupv2 unified hierarchy path for the cgroup,
+	// or empty string on cgroupv1. Used to populate BPF_MAP_TYPE_CGROUP_ARRAY for
+	// bpf_current_task_under_cgroup() ancestor checking (covers kubectl exec sub-cgroups).
+	CgroupV2Path() string
 }
 
 type instCGroupManager interface {
@@ -131,3 +135,12 @@ func (m manager) IsCgroupV2() bool {
 func (m manager) RelativePath(controller string) string {
 	return strings.TrimPrefix(m.cgroups.Path(controller), m.mountPath)
 }
+
+// CgroupV2Path returns the absolute cgroupv2 unified hierarchy path, or "" on cgroupv1.
+func (m manager) CgroupV2Path() string {
+	if !m.isV2 {
+		return ""
+	}
+
+	return m.cgroups.Path("")
+}