Skip to content

eBPF

➡ for grabbing bpftool

When sudo apt install bpftool doesn't work 

1
2
3
4
5
6
7
docker pull calico/bpftool

find /var/lib/docker/overlay2 -type f -iname "bpftool"

cp <path_from_previous_step> /usr/bin

chmod +x /usr/bin/bpftool

➡ for loading program

1
2
sudo mount -t bpf bpffs /sys/fs/bpf
sudo bpftool prog load ./sample.o /sys/fs/bpf/sample

➡ for bpf_printk() logs

1
2
3
4
5
# to clear previous logs
sudo echo > /sys/kernel/debug/tracing/trace

# print logs
sudo cat /sys/kernel/debug/tracing/trace_pipe