As of falcosecurty-libs-0.20.0 it is possible to install libscap/libsinsp as shared libs with proper pkgconfig files, allowing sysdig >=0.40.0 to link against them. This would require introducing a new falcosecurity-libs ebuild for libs/headers and greatly simplify the sysdig ebuild, not to mention reduce the size of the sysdig/csysdig executables. A falcosecurity-libs package would also be useful for the future as it is required by Stratoshark: https://blog.wireshark.org/2025/01/those-arent-packets/ Reproducible: Always
The next update for sysdig-0.40.0 will still use the current way of static linking because it works reliably, so this is just an experimental idea for the future.
While this sorta-kinda works with 0.20.0, the pkgconfig files are broken and various other things are not quite right either. Trying again with 0.21.