Skip to content

pkg: pine64: linux-megi: add eBPF support#417

Open
lafleurdeboum wants to merge 3 commits intodreemurrs-embedded:masterfrom
lafleurdeboum:bpf-support
Open

pkg: pine64: linux-megi: add eBPF support#417
lafleurdeboum wants to merge 3 commits intodreemurrs-embedded:masterfrom
lafleurdeboum:bpf-support

Conversation

@lafleurdeboum
Copy link
Copy Markdown

The archlinuxarm repository provides a package for BCC, the BPF Compiler Collection. As of today this package doesn't work on the pinephone, because the current kernel config lacks eBPF support.

This MR adds the kernel options requested by BCC. I have built the resulting kernel and can confirm that the BCC tools work (eg those that get installed at /usr/share/bcc/tools/).

BCC brings very powerful tools that may be used for fine-grained network security, like the ability to filter network request per process using cgroups. I humbly claim that it's a must-have for Arch on the Pinephone.

Comments welcome !

CONFIG_INIT_STACK_NONE=y
# CONFIG_INIT_STACK_ALL_PATTERN is not set
CONFIG_INIT_STACK_ALL_ZERO=y
# CONFIG_INIT_STACK_ALL_ZERO is not set
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just enabled this in the last kernel, why is it disabled?

@lafleurdeboum
Copy link
Copy Markdown
Author

lafleurdeboum commented Jun 16, 2022 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants