forked from aquasecurity/libbpfgo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.go
96 lines (83 loc) · 1.76 KB
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
package main
import "C"
import (
"encoding/binary"
"fmt"
"io/ioutil"
"os"
"os/exec"
"regexp"
bpf "github.com/aquasecurity/libbpfgo"
)
var reCgroup2Mount = regexp.MustCompile(`(?m)^cgroup2\s(/\S+)\scgroup2\s`)
func main() {
bpfModule, err := bpf.NewModuleFromFile("main.bpf.o")
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
defer bpfModule.Close()
err = bpfModule.BPFLoadObject()
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
prog, err := bpfModule.GetProgram("cgroup__sock")
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
cgroupRootDir := getCgroupV2RootDir()
link, err := prog.AttachCgroup(cgroupRootDir)
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
if link.GetFd() == 0 {
os.Exit(-1)
}
eventsChannel := make(chan []byte)
rb, err := bpfModule.InitRingBuf("events", eventsChannel)
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
rb.Start()
numberOfEventsReceived := 0
go func() {
for i := 0; i < 10; i++ {
_, err := exec.Command("ping", "localhost", "-c 1", "-w 1").Output()
if err != nil {
fmt.Fprintln(os.Stderr, err)
os.Exit(-1)
}
}
}()
recvLoop:
for {
b := <-eventsChannel
if binary.LittleEndian.Uint32(b) != 2021 {
fmt.Fprintf(os.Stderr, "invalid data retrieved\n")
os.Exit(-1)
}
numberOfEventsReceived++
if numberOfEventsReceived > 5 {
break recvLoop
}
}
rb.Stop()
rb.Close()
}
func getCgroupV2RootDir() string {
data, err := ioutil.ReadFile("/proc/mounts")
if err != nil {
fmt.Fprintf(os.Stderr, "read /proc/mounts failed: %+v\n", err)
os.Exit(-1)
}
items := reCgroup2Mount.FindStringSubmatch(string(data))
if len(items) < 2 {
fmt.Fprintln(os.Stderr, "cgroupv2 is not mounted")
os.Exit(-1)
}
return items[1]
}