Signed-off-by: irozzo-1A <[email protected]>

Signed-off-by: irozzo-1A <[email protected]>

Align libsinsp open_modern_bpf() with the new iters_num parameter. In
multi-thread mode set iters_num to num_workers so each worker can use BPF
iterator paths concurrently; single-buffer mode uses DEFAULT_ITERS_NUM.

Signed-off-by: irozzo-1A <[email protected]>

Replace gmtime() with gmtime_r() when formatting event times for JSON output.
gmtime is not thread-safe; parallel worker threads calling format/output paths
triggered TSAN data races on the static tm buffer.

Signed-off-by: irozzo-1A <[email protected]>

Calling httplib Server::Get() after listen() races with worker threads
handling other routes (TSAN). Register /metrics during start() with the
other routes, and gate the handler with an atomic until inspectors are open
(503 until ready). enable_prometheus_metrics() only flips the ready flag.

Signed-off-by: irozzo-1A <[email protected]>

Runs Falco TSAN build with 8 workers under stress-ng and event-generator.
Enables metrics and webserver Prometheus endpoint, scrapes /metrics in the
background, and uses configurable RUN_DURATION_SEC (default 600s).

Signed-off-by: irozzo-1A <[email protected]>

Gate the multi-threaded worker code path behind the FALCO_MULTI_THREAD
CMake option (OFF by default). When disabled, the worker_context and
do_inspect_multi_thread code is excluded at compile time and sinsp is
built with single-threaded sync policy (zero-cost no-op mutexes).

When enabled (-DFALCO_MULTI_THREAD=ON), the option forwards
ENABLE_MULTI_THREAD to libs, activating real mutexes and Folly
ConcurrentHashMap for thread-safe sinsp state.

Signed-off-by: irozzo-1A <[email protected]>

…ic race reports

Assemble a combined suppressions file from both Falco-specific and libs
suppressions at runtime. Add report_atomic_races=0 to TSAN_OPTIONS to
suppress Folly hazptr atomic-vs-mutex-init false positives that cannot
be matched by suppressions on both stacks.

Signed-off-by: irozzo-1A <[email protected]>