Hi, I just integrated changes from this commit for Kernel version 3.15 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bd4cf0ed331a275e9bf5a49e6d0fd55dffc551b8 into Kernel v

Hi, I'm trying to add new helpers to obtain a pid namespace, I'm working on kernel 4.13 --- linux/linux-4.13/kernel/bpf/helpers.c 2017-09-03 13:56:17.000000000 -0700 +++ /home/cnb/ebpf-backports/new-b

Thank you very much.

Hi All, I was working on this bcc issue https://github.com/iovisor/bcc/issues/1329 (PID filtering issues when running bpf script inside container). The current issue is that bpf_get_current_pid_tgid()

Thank you very much for your comments, after reading them, I realized that my change just added too much unneeded code, when we could just return the values of interest in one call. I'll delete the un

Hi, I have implemented helper bpf_get_current_ns_info(void* buf, int size) as was proposed. Let me know if something else is needed or if any other change in the code is required, I'm currently testin

Hi All, I'm still working this issue https://github.com/iovisor/bcc/issues/1329. I have added tests under samples/bpf, here is test calling this new helper. Inside the container ping-10619 [000] d.s1

Hi, I'll add the device major/minor numbers into the pidns_info structure and work on those 4 points. Thanks for your guidance on this. Bests

Hi Ryanna, That repository contains changes to add ebpf to the kernel shipped with Rhel 7.3. If you clone branch bpf_3.18_features that will give you a working kernel with ebpf features from kernel ve

Hi, I have resumed work on issue https://github.com/iovisor/bcc/issues/1329. I just added the needed fields in this helper structure and also I updated the bcc code to use this helper, but I have a co

Hi All, Just tested the code last night, and it did not work. Now I have fixed it and tested in a container, it's finally working except for the the device major and minor info. Here is the updated co

Hi All, I have applied changes to add thenew helper: bpf_get_current_pidns_info using bpf-next branch. Let me know if what you think. From 932f55d885bf34443bb73ec4b24f9dd4b95b64c7 Mon Sep 17 00:00:00

This helper obtains the active namespace from current and returns pid, tgid, device major/minor and namespace id as seen from that ns, allowing to do pid filtering inside a container. Major and minor

Quentin, Thanks a lot for your feedback, I think I'm getting closer to finish this one. I have included the changes suggested, let me know if there is anything else that needs to be changed or improve

Yonghong Song, Let me know what you think of this last patch From 49d9dbcbd52c82dc44b6351ac1824538a6db155a Mon Sep 17 00:00:00 2001 From: cneira <cneirabustos@...> Date: Wed, 8 Aug 2018 17:40:54

Hi, I have modified this patch following suggestion on bpf-next, let me know if this looks ok. I'm working on testing it on bpf-next current (4.20) but I'm getting -EINVAL in bpf_load when executing a

Hi, Could you give me a hand with a couple of doubts? - What is the reason to not use the current namespace api instead of directly accessing namespaces?. - Regarding bpf programs not being preemptibl

As a bpf program cannot sleep, I needed to add a spinlock to kern_path, as it calls getname_kernel() which may sleep. The inode is accessed directly, as we are just interested in the inode's s_dev. Le

I'm sorry there was an error on the code, the spinlock was never released if kern_path() failed.Here is the fix. diff --git a/kernel/bpf/helpers.c b/kernel/bpf/helpers.c index 2de82d14424d..2a83eba631

Hi, Yes, I'm still interested as I need this capability at $WORK, but haven't had the time to re-write the dentry functions we need, as currently they could sleep. I could resume work on this next mon