bottlerocket-os · bcressey · Mar 25, 2026 · Mar 25, 2026 · Mar 25, 2026 · Mar 26, 2026
diff --git a/.github/actions/setup-node/action.yml b/.github/actions/setup-node/action.yml
@@ -3,7 +3,7 @@ description: "Performs setup for caching and other common needs."
 runs:
   using: "composite"
   steps:
-    - run: sudo apt -y install build-essential openssl libssl-dev pkg-config liblz4-tool clang
+    - run: sudo apt -y install build-essential openssl libbpf-dev libelf-dev libssl-dev pkg-config liblz4-tool clang
       shell: bash
     - uses: actions/cache/restore@v4
       # Restore most recent cache if available.

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/packages/rottweiler/Cargo.toml b/packages/rottweiler/Cargo.toml
@@ -16,3 +16,4 @@ source-groups = [
 
 [build-dependencies]
 glibc = { path = "../glibc" }
+libbpf = { path = "../libbpf" }
diff --git a/packages/rottweiler/rottweiler.spec b/packages/rottweiler/rottweiler.spec
@@ -8,6 +8,10 @@
     --build-dir %{_builddir}/sources \
     --spdx --cyclonedx}
 
+# Skip the FIPS check, which has a false positive because of a symbol that
+# starts with the "ring" prefix.
+%undefine cross_check_fips
+
 Name: %{_cross_os}rottweiler
 Version: 0.1.0
 Release: 1%{?dist}
@@ -16,7 +20,9 @@ License: Apache-2.0 OR MIT
 URL: https://github.com/bottlerocket-os/bottlerocket
 
 BuildRequires: %{_cross_os}glibc-devel
+BuildRequires: %{_cross_os}libbpf-devel
 Requires: %{_cross_os}cryptsetup
+Requires: %{_cross_os}libbpf
 Requires: %{_cross_os}systemd-cryptsetup
 Requires: %{_cross_os}tpm2-tools
 

diff --git a/packages/selinux-policy/fs.cil b/packages/selinux-policy/fs.cil
@@ -22,6 +22,7 @@
 (genfscon bdev / any)
 (genfscon binfmt_misc / binfmt_misc_fs)
 (genfscon bpf / any)
+(genfscon bpf /rottweiler private)
 (genfscon cgroup / any)
 (genfscon cgroup2 / any)
 (genfscon debugfs / any)
Original file line number	Diff line number	Diff line change
Expand Up		@@ -16,3 +16,4 @@ source-groups = [

		[build-dependencies]
		glibc = { path = "../glibc" }
		libbpf = { path = "../libbpf" }