update(cmake): bump falcoctl to v0.8.0-rc4

[FedeDP]

What type of PR is this?

/kind release

Any specific area of the project related to this PR?

/area build

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

NONE

[FedeDP]

/milestone 0.38.0

[incertum]

/approve

[FedeDP]

CI Build / test-dev-packages / test-packages (pull_request) Failing after 4m

The test is failing because new falcoctl (v0.8.0-rc3) uses new strings when eBPF and kmod gets compiled, while testing framework expects a generic Driver built. string.
Also, kmod building is failing because a fix is needed on driverkit and needs to be ported back to falcoctl (v0.8.0-rc4 i assume).
/hold
Will bump to falcoctl 0.8.0-rc4 once it's ready.

[FedeDP]

Opened driverkit PR: falcosecurity/driverkit#343

[FedeDP]

TestFalco_Legacy_KernelUpgrade test is failing; but there is no error log (neithjer in the uploaded report artifact).
I cannot repro it locally both with a Falco built from this branch and from the uploaded tar.gz artifact:

./build/falco.test -falco-binary /home/federico/Scaricati/falco-0.38.0-249+c54c6dd-x86_64/usr/bin/falco -falco-config /home/federico/Scaricati/falco-0.38.0-249+c54c6dd-x86_64/etc/falco/falco.yaml -test.run TestFalco_Legacy_KernelUpgrade -test.v  
=== RUN   TestFalco_Legacy_KernelUpgrade
=== PAUSE TestFalco_Legacy_KernelUpgrade
=== CONT  TestFalco_Legacy_KernelUpgrade
{"deadline":180000000000,"level":"info","msg":"running falco with runner","time":"2024-05-13T10:00:03+02:00"}
{"cmd":"/home/federico/Scaricati/falco-0.38.0-249+c54c6dd-x86_64/usr/bin/falco -c /home/federico/Scaricati/falco-0.38.0-249+c54c6dd-x86_64/etc/falco/falco.yaml -o json_output=true -r falco_rules.yaml -o engine.kind=replay -o engine.replay.capture_file=kernel-upgrade.scap -o json_include_output_property=false -o json_include_tags_property=false -o log_level=debug -o log_stderr=true -o log_syslog=false -o stdout_output.enabled=true","level":"debug","msg":"executing command","time":"2024-05-13T10:00:03+02:00"}
--- PASS: TestFalco_Legacy_KernelUpgrade (3.93s)
PASS

[FedeDP]

For completeness, i also tried to run the same test passing the LSAN_OPTIONS that we also specify in our reusable workflow: https://github.com/falcosecurity/falco/blob/master/.github/workflows/reusable_test_packages.yaml#L56C11-L56C23

Still success.

[FedeDP]

/unhold

[jasondellaluce]

/approve

[incertum]

/approve

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: FedeDP, incertum, jasondellaluce

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [FedeDP,incertum,jasondellaluce]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment