云微

> What does ownership of runtime means? Is it something that holds all ownerships of compiled ebpf programs? (The ownership of maps are remained in the shm, and isn't held...

Is it better that you can first come up with a small example of how to use the new api to implement a new eBPF attach type (e.g. nginx module...

How have you run the Python program with something like `LD_PRELOAD=~/.bpftime/libbpftime-agent.so [Your python program]`? What's the output? See https://github.com/eunomia-bpf/bpftime/tree/master/example/minimal You can load the `LD_PRELOAD=~/.bpftime/libbpftime-syscall-server.so ./time_freezer` first, and execute the `LD_PRELOAD=~/.bpftime/libbpftime-agent.so...

 It can work in my computer. See my experiment code in https://github.com/eunomia-bpf/bpftime/blob/uprobe-python/example/minimal/uprobe-override.bpf.c

If you find any documents making you confused, please tell us or open a PR : )

Thanks! For the first question, maybe you can try https://github.com/aquasecurity/libbpfgo, it should be able to work with bpftime. For the second questions: To build binaries with targeted function symbols exposed,...

Could you please help us test whether bpftrave is working with USDT? @caizixian

I think that's a bug. I found the same problem when trying to attach bpftime to xdp programs today. It should be fixed soon. We should make sure the bpftime...

I think maybe we can find a way to solve this? It seems not necessary for bpftime to access `/sys/kernel/tracing/events/syscalls` since it's not actually work in the kernel?

@ShawnZhong Thank you very much for your effort! In fact, I think libbpf is not necessary for running bpftime in userspace. The syscall-server.so use LD_PRELOAD to override the functions in...