Introduction In this post, we will learn about a useful tool called the bpftool which is a command-line utility in Linux for interacting with eBPF programs and maps. It allows you to perform various operations such as loading and attaching programs, manipulating maps, and retrieving information about eBPF objects. I highly recommend reading this post first, which explains the details discussed here, since this post is intended to serve as more of a cheat sheet rather than a very detailed one,...| thegraynode.io
Introduction In this post, we will learn about portable or relocatable eBPF programs. You might wonder, can we not just copy our compiled program to another machine with the same CPU architecture and run it like any other program? Well, usually not. eBPF programs are more unique and rightfully so. They run directly in the kernel space and miss out on some of the help and abstractions that normal programs benefit from.| thegraynode.io