HOWTO: BCC to libbpf conversion
A practical guide to converting your BCC-based BPF application to libbpf + BPF CO-RE.
A practical guide to converting your BCC-based BPF application to libbpf + BPF CO-RE.
What does portability mean in BPF context? What are the challenges of writing portable BPF programs that developers need to deal with? This post will describe BPF portability problem and how BPF CO-RE (Compile Once – Run Everywhere) is helping to address this problem.
TL;DR: There is work in progress to bring compact debug type information into the kernel, which will be leveraged by BPF to get it to the next level in terms of developer experience and capabilities. We developed an algorithm that compresses 124MB of DWARF type data into just 1.5MB of compact BTF type data, making it suitable to be included in the Linux kernel image by default.
Hi, and welcome to the BPF blog! We'll be adding articles here from time to time covering new developments in BPF, and filling in some existing details about BPF you might not be aware of.
The BPF verifier guarantees that program itself is safe for the kernel to execute, but in order to use BPF as a whole safely and surprise free the users need to understand the lifetime of BPF programs and maps. This post covers these details in depth.