List of frequently asked questions| Tetragon - eBPF-based Security Observability and Runtime Enforcement
Introduction In this post, we will learn about portable or relocatable eBPF programs. You might wonder, can we not just copy our compiled program to another machine with the same CPU architecture and run it like any other program? Well, usually not. eBPF programs are more unique and rightfully so. They run directly in the kernel space and miss out on some of the help and abstractions that normal programs benefit from.| thegraynode.io
Why most BPF applications have to be portable across multiple Linux kernels and how BPF CO-RE (Compile Once – Run Everywhere) technology makes that possible and easy.| nakryiko.com