Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions components/execd/.gitignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# Kernel BTF dump for CO-RE compilation (bpf2go build-time only, never
# committed — see pkg/ebpf/prog/audit.bpf.c). Regenerate with:
# bpftool btf dump file /sys/kernel/btf/vmlinux format c > pkg/ebpf/prog/vmlinux.h
pkg/ebpf/prog/vmlinux.h
pkg/ebpf/prog/vmlinux_*.h
6 changes: 5 additions & 1 deletion components/execd/pkg/ebpf/prog/audit.bpf.c
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,11 @@
// variant only.

// vmlinux.h provides every kernel type used below (including __u32/__u64),
// so it must be included before the libbpf helper headers.
// so it must be included before the libbpf helper headers. It is a
// build-time-only artifact — a kernel BTF dump for CO-RE — regenerated with
// `bpftool btf dump file /sys/kernel/btf/vmlinux format c > vmlinux.h` on a
// target kernel before running bpf2go, and is NOT committed (the generated
// bytecode embedded in the audit_bpf*.go bindings is what ships).
#include "vmlinux.h"
#include <bpf/bpf_core_read.h>
#include <bpf/bpf_helpers.h>
Expand Down
7 changes: 0 additions & 7 deletions components/execd/pkg/ebpf/prog/vmlinux.h

This file was deleted.

Loading
Loading