boopkit icon indicating copy to clipboard operation
boopkit copied to clipboard

Published 20 hours ago • verified publisher icon krisnova

eBPF Pinning

Open krisnova opened this issue 2 years ago • 1 comments

We want to pin the eBPF probe such that it will persist across reboot. This will allow us to hide the userspace component in clever ways.

Source: https://lwn.net/Articles/664688/

krisnova avatar Apr 05 '22 12:04 krisnova

I think that BPFFS is a Virtual File System, just a memory file system. write by other process, not load data from device. So, pin the eBPF probe cant do that. cant across reboot.

via: https://facebookmicrosites.github.io/bpf/blog/2018/08/31/object-lifetime.html

cfc4n avatar Apr 13 '22 16:04 cfc4n