feat(sandboxpolicy): add opt-in persistent exec enforcement

cmd/main.go

@@ -62,6 +62,7 @@ import (
 	"github.com/kubescape/node-agent/pkg/rulemanager/rulecooldown"
 	"github.com/kubescape/node-agent/pkg/rulemanager/rulecreator"
 	"github.com/kubescape/node-agent/pkg/rulemanager/ruleswatcher"
+	sandboxintegration "github.com/kubescape/node-agent/pkg/sandboxpolicy/integration"
 	"github.com/kubescape/node-agent/pkg/sbommanager"
 	sbommanagerv1 "github.com/kubescape/node-agent/pkg/sbommanager/v1"
 	sbomscanner "github.com/kubescape/node-agent/pkg/sbomscanner/v1"
@@ -569,6 +570,34 @@ func main() {
 		defer mainHandler.Stop()
 	}
 
+	if cfg.EnableSandboxPolicy {
+		// Enforcement is independent of observer/runtime-detection switches. The
+		// service rejects unavailable predicates/bindings rather than weakening them.
+		sandboxService, sandboxErr := sandboxintegration.NewService(ctx, sandboxintegration.ServiceOptions{
+			Kubernetes: k8sClient.GetKubernetesClient(), Dynamic: k8sClient.GetDynamicClient(),
+			Containers: mainHandler.GetContainerCollection(), Tracers: mainHandler.GetTracerCollection(),
+			NodeName: cfg.NodeName, AgentNamespace: cfg.NamespaceName, ImageName: cfg.SandboxPolicyImage, ImageArchive: "tracers.tar",
+			ContainerdSocket: cfg.SandboxPolicyContainerdSocket, ControlRoot: cfg.SandboxPolicyControlRoot, MaxOwners: cfg.SandboxPolicyMaxOwners,
+			Sources:   sandboxintegration.NewProfileResolver(storageClient.GetStorageClient()),
+			Receivers: thirdPartyTracers.ThirdPartyEventReceivers,
+			OnError:   func(err error) { logger.L().Ctx(ctx).Error("sandbox policy service diagnostic", helpers.Error(err)) },
+		})
+		if sandboxErr != nil {
+			logger.L().Ctx(ctx).Fatal("creating sandbox policy service", helpers.Error(sandboxErr))
+		}
+		dWatcher.AddAdaptor(sandboxService)
+		if sandboxErr = sandboxService.Start(ctx); sandboxErr != nil {
+			logger.L().Ctx(ctx).Fatal("starting sandbox policy service", helpers.Error(sandboxErr))
+		}
+		defer func() {
+			cleanupCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+			defer cancel()
+			if err := sandboxService.Close(cleanupCtx); err != nil {
+				logger.L().Error("sandbox policy cleanup incomplete", helpers.Error(err))
+			}
+		}()
+	}
+
 	// start watching
 	dWatcher.Start(ctx)
 	defer dWatcher.Stop(ctx)

go.mod

@@ -14,6 +14,7 @@ require (
 	github.com/cenkalti/backoff/v5 v5.0.3
 	github.com/cespare/xxhash/v2 v2.3.0
 	github.com/cilium/ebpf v0.22.0
+	github.com/containerd/containerd v1.7.36
 	github.com/crewjam/rfc5424 v0.1.0
 	github.com/cyphar/filepath-securejoin v0.6.1
 	github.com/deckarep/golang-set/v2 v2.8.0
@@ -35,12 +36,13 @@ require (
 	github.com/kubescape/backend v0.0.39
 	github.com/kubescape/go-logger v0.0.35
 	github.com/kubescape/k8s-interface v0.0.214
-	github.com/kubescape/storage v0.0.303
+	github.com/kubescape/storage v0.0.352-0.20261013133511-eb6406e01cb9
 	github.com/kubescape/workerpool v0.0.0-20250526074519-0e4a4e7f44cf
 	github.com/moby/sys/mountinfo v0.7.2
 	github.com/opcoder0/fanotify v0.4.2
 	github.com/opencontainers/go-digest v1.0.0
 	github.com/opencontainers/image-spec v1.1.1
+	github.com/opencontainers/runtime-spec v1.3.0
 	github.com/panjf2000/ants/v2 v2.11.3
 	github.com/picatz/xcel v0.0.0-20260226001349-6958ffac5706
 	github.com/prometheus/alertmanager v0.27.0
@@ -184,7 +186,6 @@ require (
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
 	github.com/containerd/cgroups/v3 v3.1.2 // indirect
-	github.com/containerd/containerd v1.7.36 // indirect
 	github.com/containerd/containerd/api v1.10.0 // indirect
 	github.com/containerd/continuity v0.4.5 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
@@ -352,7 +353,6 @@ require (
 	github.com/olekukonko/tablewriter v1.0.9 // indirect
 	github.com/olvrng/ujson v1.1.0 // indirect
 	github.com/opcoder0/capabilities v0.0.0-20221222060822-17fd73bffd2a // indirect
-	github.com/opencontainers/runtime-spec v1.3.0 // indirect
 	github.com/opencontainers/selinux v1.13.1 // indirect
 	github.com/packetcap/go-pcap v0.0.0-20250723190045-d00b185f30b7 // indirect
 	github.com/pborman/indent v1.2.1 // indirect
@@ -480,7 +480,7 @@ require (
 	zombiezen.com/go/sqlite v1.4.0 // indirect
 )
 
-replace github.com/inspektor-gadget/inspektor-gadget => github.com/kubescape/inspektor-gadget v0.0.0-20260826074832-06b0d12baca0
+replace github.com/inspektor-gadget/inspektor-gadget => github.com/kubescape/inspektor-gadget v0.0.0-20261027133411-87a796fe9780
 
 replace github.com/anchore/syft => github.com/kubescape/syft v1.32.0-ks.2