Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

WIP: Initial attempt for eh_frame based stack unwinding in eBPF #150

Closed
wants to merge 6 commits into from
Closed

WIP: Initial attempt for eh_frame based stack unwinding in eBPF #150

wants to merge 6 commits into from

Conversation

kakkoyun
Copy link
Member

@kakkoyun kakkoyun commented Nov 30, 2021 •
edited

Signed-off-by: Kemal Akkoyun kakkoyun@gmail.com

blocked by xref: aquasecurity/libbpfgo#93

Fixes #293

  • Convince eBPF verifier that I'm not trying to harm anyone
  • Make sure it is locally testable Use kernel 5.10 for minikube.iso. kubernetes/minikube#12707
  • Support multiple kernel versions (>= 4.19, >= 5.2 (with BTF))
  • Increase memlock rlimit dynamically
  • Move process discovery before attaching the eBPF program
    • Test for the simple case
  • Rebase
  • Split and commit BTF, Linux 5.2+ changes
  • Implement BPF map of maps after we have the support in libbpf-go: Utilize New CreateMap API implementing bpf_map_create, Type/name accessors aquasecurity/libbpfgo#138
  • SystemdUnit .PID() implement
  • Use perf_map to find out executable
  • Handle unwinding information of dynamically linked libraries (multiple mappings)
  • Test and prove it works visually
  • Add debug_frame support
  • Conclude and properly vendor delve/dwarf package and ask upstream if they have these changes
  • Clean up TODO comments in code

@kakkoyun kakkoyun changed the title Initial attempt for eBPF-based stack unwinding WIP: Initial attempt for eBPF-based stack unwinding Nov 30, 2021
@kakkoyun kakkoyun force-pushed the bpf_stack_unwinding branch 2 times, most recently from 8fa7547 to 3bc1abe Compare November 30, 2021 16:47
@kakkoyun
Initial try for ebpf stack unwinding
c85b479 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun
Split simple cpu profiling and cpu profiling with unwinding
31aa1a6 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun
Fix communication issues with kernel space
3b5e6e6 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun
Send eh_frame of all mappings
45a791b 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun
Add debug prints back
a2824d7 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun
Remove build id flag
8e02f0a 
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
@kakkoyun kakkoyun changed the title WIP: Initial attempt for eBPF-based stack unwinding WIP: Initial attempt for eh_frame based stack unwinding in eBPF Mar 18, 2022
kakkoyun
kakkoyun commented Apr 5, 2022
View reviewed changes
scripts/local-dev.sh
echo "$FILE exists."
else
echo "$FILE does not exist. Dwonloading..."
wget https://github.com/eiffel-fl/minikube/releases/download/v42-prerelease/minikube-5.10.iso
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@v-thakkar FYI

@kakkoyun
Copy link
Member Author

Superceded by #346

@kakkoyun kakkoyun closed this Apr 13, 2022
@kakkoyun kakkoyun mentioned this pull request Apr 13, 2022
Closed
16 tasks
@javierhonduco javierhonduco deleted the bpf_stack_unwinding branch August 24, 2022 09:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Add eh_frame based stack unwinding
1 participant
@kakkoyun