bpfd
bpfd copied to clipboard
genuinetools
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
It appears like Docker detection happens by inspecting /proc/1/cgroup. If the cgroup paths themselves don't include "docker", then the detection fails. This happens if the user decides to control /...
Fixes #16 This additional detection method is useful on hosts using `cgroupv2`, besides the points already mentioned in #16
It looks like gVisor removed the `/__runsc_containers__` directory ([PR](https://github.com/google/gvisor/pull/378/commits/04cbb13ce9b151cf906f42e3f18ce3a875f01f63)) so gVisor runtime detection now fails. Can't see an obvious replacement :(
The README mentions hot patch support. Is there anywhere I can read more about this?
Does this framework requires bpfd to compiled and installed from https://bpfd.dev/getting-started/building-bpfd/. Thank you
Metadata
Owner
Metadata
Framework for running BPF programs with rules on Linux as a daemon. Container aware.