Build a Portable CO-RE eBPF Loader With Libbpf
Trace a CO-RE eBPF program from BTF generation and Clang compilation through libbpf skeleton loading, verifier logs, attachment, and cleanup.
Category: eBPF Tooling
Build OpenWrt eBPF: Kernel Config & Toolchain Guide
Enable eBPF on OpenWrt by configuring kernel flags, building custom firmware, and verifying support with bpftool – complete setup steps for routers.
How to Build an eBPF Trace That Answers One Question
A focused eBPF trace starts with logs and strace, then uses the right hook, attribution fields, and verifier-safe code to answer one question.
Compile libbpf from Source Code
You want to compile libbpf from source so your bpf programs work reliably on your system and match the kernel and application needs. I’ll walk you through why building the library yourself can give you tighter control over dependencies, better compatibility with the linux kernel, and a reproducible process for development. We’ll start with the […]
BCC eBPF Compiler for Linux Kernel Tracing
BCC compiles eBPF C at runtime for deep Linux kernel tracing. Learn when to use BCC versus CO-RE, which tools solve real problems, and how to write safe probes.
Bpftool: BPF Program Inspection and Debugging Guide
Master bpftool for inspecting, loading, and debugging BPF programs. Learn map dumps, program verification, BTF headers, and kernel feature probes.
How Pixie Uses eBPF for Kubernetes Visibility
Pixie uses eBPF to expose Kubernetes HTTP, gRPC, TLS, database, and network telemetry without code changes, while showing where kernel-level visibility ends.