3 ms·
Writing EBPF programs is still quite involved, especially if you want to distribute them on other systems (as currently the features depend on the Kernel versio
by ThePhysicist 8y ago
Writing EBPF programs is still quite involved, especially if you want to distribute them on other systems (as currently the features depend on the Kernel version so the programs are not very portable yet).
Tools like bcc make the process easier though, but require additional tooling on the system (e.g. LLVM).
- chronid 8y agoMaybe I'm wrong (or things changed since I looked at this), but if you use bcc you essentially depend from LLVM at runtime. I guess you would probably want the (precompiled) eBPF program as a binary that you can load in some way instead, for "production".