Add breakpoints ANYWHERE (EVEN IN THE KERNEL)! Intro to eBPF with Rust and Aya - Part 1

Описание: eBPF unlocks superpowers into the Linux Kernel with the ability to programmatically place trace points at any arbitrary location in both user and kernel space. This opens up untold avenues for tracing, debugging and security/monitoring applications.

With the help of Aya, we will look into taking advantage of eBPF probes in various parts of the kernel and how they can be utilized effectively.

Part 2:    • Tracepoints, bpf_printk - eBPF with Rust a...  

==========
Resources
==========

Aya - Rust | Getting Started - https://aya-rs.dev/book/

Learning eBPF | Free book by ‪@lizrice5029‬https://isovalent.com/books/learning-...
(This book is the bible of eBPF, if you ask me)

Learning eBPF Tracing | Blogpost by ‪@BrendanGregg‬https://www.brendangregg.com/blog/201...


============
Chapters
============
0:00 Introduction
0:12 History
1:24 "E" of eBPF
5:12 eBPF when running containers
6:25 eBPF vs Kernel Modules
7:15 Limitations on eBPF Applications
11:20 Where can you place eBPF probes?
15:40 tracepoints vs kprobes
16:12 Parts of an eBPF application
18:30 Compiling eBPF bytecode / LLVM / Rust toolchain
21:40 Getting started with Aya-rs
26:35 Aya boilerplate walkthrough
29:30 Running the application(and failing at it)
31:40 actually running the application


==================
Reach out to me
==================
Daniyaal Khan
LinkedIn:   / daniyaalk  
Github: https://github.com/daniyaalk/