3 ms·

And assuming there's no bugs in the BPF code... Oh wait: https://news.ycombinator.com/item?id=41031699 https://news.ycombinator.com/item?id=41031699

• efee22 2y ago
  RHEL kernel.. right. Imho, I'd trust an upstream stable kernel far more than a RHEL one for production which has dozen of feature backports and an internal kABI to maintain.. granted RH has a QA team, but it is still impossible to test everything beforehand.
  • worthless-trash 2y ago
    On the upside, non root users can't insert ebpf code, so its a priv'ed operation, not like other distros.
    • nequo 2y ago
      Isn’t it tied to CAP_BPF on every distro since the 5.8 kernel? https://mdaverde.com/posts/cap-bpf/ https://mdaverde.com/posts/cap-bpf/
      • worthless-trash 2y ago
        Rhel8 is based on 4.18 RHEL9 is based on 5.14 , i think it still has the same restriction ( kernel.unprivileged_bpf_disabled ). I reckon Red Hat may duplicate upstreams behavior by RHEL10.