eBPF 101: Your First Step into Kernel Programming
eBPF has revolutionized Linux observability and security by allowing sandboxed programs to run in the kernel without changing kernel source code or loading modules I. What is this eBPF? It looks scary! Have you wanted to write programs that act as drivers for Linux? Wanted programs to run at a kernel level? Wanted to monitor events, internal resources and get better observability? All you need to know is how to make good use of Linux eBPF. eBPF is a technology in the Linux kernel that can run