Cannot run Neuvector on Talos due to missing "grep"

[ShaunMaher]

Hi team.

What are the chances of having "grep", "pgrep" and "sed" added to the Talos Linux rootfs? Neuvector (security product bought by Suse) seems to need these to exist on the Kubernetes host for it's Enforcer process to run.

Related issue I have raised with Neuvector: neuvector/neuvector#541

Cheers.
Shaun.

[smira]

We try to avoid polluting rootfs with stuff, as the list never stops. Proper solution should ship with its own tools in the container filesystem.

You could still develop a system extension which has these tools overlaid on top of Talos rootfs.