I run the commend `tracee` on a vagrant ubuntu box, I can’t get the result, nee . . .

Kubernetes
#1

Bill Wang:
I run the commend tracee on a vagrant ubuntu box, I can’t get the result, need help

vagrant@vagrant:~$ sudo docker run --name tracee --rm --privileged --pid=host -v /lib/modules/:/lib/modules/:ro -v /usr/src:/usr/src:ro -v /tmp/tracee:/tmp/tracee aquasec/tracee:0.4.0 --trace countainer=new
2021/05/30 11:35:04 invalid filter option specified, use '--filter help' for more info

vagrant@vagrant:~$ sudo docker run --name tracee --rm --privileged --pid=host -v /lib/modules/:/lib/modules/:ro -v /usr/src:/usr/src:ro -v /tmp/tracee:/tmp/tracee aquasec/tracee:0.4.0 --trace comm=ls
2021/05/30 11:38:22 missing kernel source code compilation dependency
#2

Mohamed Ayman:
Try this

$ docker run --name tracee --rm --privileged -v /lib/modules/:/lib/modules/:ro -v /usr/src:/usr/src:ro -v /tmp/tracee:/tmp/tracee -it aquasec/tracee:0.4.0 --trace container=new

#3

Vinay Kumar:
sudo docker run --name tracee --rm --privileged -v /lib/modules/:/lib/modules/:ro -v /usr/src:/usr/src:ro -v /tmp/tracee:/tmp/tracee -it aquasec/tracee:0.4.0 --trace container=new
failed to add kprobe ‘p:kprobes/pcap_capable cap_capable’: -17
failed to create kprobe event: -17

#4

Vinay Kumar:
This is on GCP