libbpfgo icon indicating copy to clipboard operation
libbpfgo copied to clipboard

move osinfo logic into tracee (or expand it in libbpfgo ?)

Open rafaeldtinoco opened this issue 2 years ago • 5 comments

I think OSinfo logic is only used by tracee and, it is not part of libbpf nor interesting to be kept inside libbpfgo (IMO). What do you think @geyslan ? We could create a pkg there and get rid of the helper:

https://github.com/aquasecurity/libbpfgo/blob/main/helpers/osinfo.go

from here. It would be easier to expand that pkg there, while removing the code footprint here.

WDYT ?

rafaeldtinoco avatar Mar 01 '23 04:03 rafaeldtinoco

This can be a good idea, but we better verify that the users of libbpfgo really don't use it. We can open a discussion about that to see if there are any objections

yanivagman avatar Mar 05 '23 10:03 yanivagman

Actually, we can copy the packages into tracee (including helpers?) and write a comment that it is deprecated in libbpfgo, and whoever wants it can use the package from Tracee, WDYT?

yanivagman avatar Mar 05 '23 11:03 yanivagman

Yep, good idea, lets deprecate it in libbpfgo for one or two releases and move it into tracee!

rafaeldtinoco avatar Mar 06 '23 04:03 rafaeldtinoco

Yep, good idea, lets deprecate it in libbpfgo for one or two releases and move it into tracee!

+1

Actually, we can copy the packages into tracee (including helpers?) and write a comment that it is deprecated in libbpfgo, and whoever wants it can use the package from Tracee, WDYT?

I think we have a current difficulty in maintaining different packages inside tracee, for example it's laborious to make changes in types. We just avoided turning pkg/logger into a pkg of its own by thinking about that trouble, what resulted in a three layer callback.

I guess @NDStrahilevitz has thoughts concerning that as well.

geyslan avatar Mar 06 '23 12:03 geyslan

I think we have a current difficulty in maintaining different packages inside tracee, for example it's laborious to make changes in types.

I thought about the multi-packaged tracee (pkg/xxx) package.

rafaeldtinoco avatar Mar 06 '23 14:03 rafaeldtinoco

https://github.com/aquasecurity/tracee/pull/4090

geyslan avatar Jun 19 '24 20:06 geyslan