How Linux Maps Hardware to Kernel Drivers
Use lspci, lsusb, lsmod, modinfo, and sysfs to identify bound, loaded, built-in, and missing Linux drivers, then trace probe failures with confidence.
Use lspci, lsusb, lsmod, modinfo, and sysfs to identify bound, loaded, built-in, and missing Linux drivers, then trace probe failures with confidence.
SIGUSR1 defaults to terminating processes with no core dump. Learn why POSIX chose this behavior, how to install handlers, and debug unexpected signal deaths.
Pick the right Linux IPC mechanism for your task: pipes for streaming, sockets for client-server, shared memory for throughput, signals for notifications.
Linux processes cycle through R, S, D, and T states. Learn to read /proc, use strace, and diagnose stuck tasks without guessing or killing blindly.
Master daemon creation in C with the double-fork and setsid technique. Verify detachment with ps and strace to ensure your service survives logout.
CONFIG_BPF_SYSCALL compiles the bpf() syscall into your kernel, the single entry point every eBPF program load and firewall rule requires to work.
Profile-bpfcc samples CPU stacks in-kernel without recompiling, showing exactly where cycles burn in kernel and userspace with minimal overhead.
bpffs mount requires CAP_SYS_ADMIN for both the mount and bpf() syscall. Learn how to diagnose failures, make mounts persistent, and secure pins across reboots.
XDP offload runs programs on the NIC processor, not your CPU. Learn which modes actually use hardware and how to verify your real attach mode.
Use modprobe to load Linux kernel modules safely with dependency resolution. This guide covers the commands, diagnostics, and configuration you need.
Track Linux kernel versions from 1991 to present with release dates, LTS support windows, and how to verify your running kernel’s patch status.
BCC compiles eBPF C at runtime for deep Linux kernel tracing. Learn when to use BCC versus CO-RE, which tools solve real problems, and how to write safe probes.
Master bpftool for inspecting, loading, and debugging BPF programs. Learn map dumps, program verification, BTF headers, and kernel feature probes.
Katran forwards packets at the NIC receive path using eBPF and XDP, eliminating userspace overhead and lock contention to hold at Facebook scale.
Master Linux kernel contributions by starting small: documentation fixes and checkpatch cleanups teach the workflow without breaking production systems.