3 ms·
> we regularly depended on atime for identifying which files are actively being used in myriad situations You can do that with bpf tooling now, for example the
by __turbobrew__ 1y ago
> we regularly depended on atime for identifying which files are actively being used in myriad situations
You can do that with bpf tooling now, for example the `opensnoop` BCC program can capture all file opens on demand. You can also write tools which capture all POSIX IOs to specific files/directories. I can see atime sometimes being useful in some super niche use cases such as hisenbugs you cannot reproduce reliably, but I would be reaching for BPF tools first.
- homebrewer 1y agoForget bpf, Linux has the audit framework to solve exactly this problem, and it's been in heavy use for a couple of decades now https://www.redhat.com/en/blog/configure-linux-auditing-auditd https://www.redhat.com/en/blog/configure-linux-auditing-audi... https://linux-audit.com/linux-audit-framework/configuring-and-auditing-linux-systems-with-audit-daemon/ https://linux-audit.com/linux-audit-framework/configuring-an...