This brief description of CO-RE was initially published in December 2020 by the Cilium community as part of the eBPF Updates #2 on ebpf.io. CO-RE (Compile Once, Run Everywhere) is a mechanism used with eBPF to ensure portability of the programs, mainly those intended for tracing. It addresses the issue that arises when a given structure is modified between two kernel versions. Tracing programs may attempt to access a field from a given structure by reading at a specific offset in that structu...
