raw_tracepoint.go 2.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687
  1. package link
  2. import (
  3. "errors"
  4. "fmt"
  5. "github.com/cilium/ebpf"
  6. "github.com/cilium/ebpf/internal/sys"
  7. )
  8. type RawTracepointOptions struct {
  9. // Tracepoint name.
  10. Name string
  11. // Program must be of type RawTracepoint*
  12. Program *ebpf.Program
  13. }
  14. // AttachRawTracepoint links a BPF program to a raw_tracepoint.
  15. //
  16. // Requires at least Linux 4.17.
  17. func AttachRawTracepoint(opts RawTracepointOptions) (Link, error) {
  18. if t := opts.Program.Type(); t != ebpf.RawTracepoint && t != ebpf.RawTracepointWritable {
  19. return nil, fmt.Errorf("invalid program type %s, expected RawTracepoint(Writable)", t)
  20. }
  21. if opts.Program.FD() < 0 {
  22. return nil, fmt.Errorf("invalid program: %w", sys.ErrClosedFd)
  23. }
  24. fd, err := sys.RawTracepointOpen(&sys.RawTracepointOpenAttr{
  25. Name: sys.NewStringPointer(opts.Name),
  26. ProgFd: uint32(opts.Program.FD()),
  27. })
  28. if err != nil {
  29. return nil, err
  30. }
  31. err = haveBPFLink()
  32. if errors.Is(err, ErrNotSupported) {
  33. // Prior to commit 70ed506c3bbc ("bpf: Introduce pinnable bpf_link abstraction")
  34. // raw_tracepoints are just a plain fd.
  35. return &simpleRawTracepoint{fd}, nil
  36. }
  37. if err != nil {
  38. return nil, err
  39. }
  40. return &rawTracepoint{RawLink{fd: fd}}, nil
  41. }
  42. type simpleRawTracepoint struct {
  43. fd *sys.FD
  44. }
  45. var _ Link = (*simpleRawTracepoint)(nil)
  46. func (frt *simpleRawTracepoint) isLink() {}
  47. func (frt *simpleRawTracepoint) Close() error {
  48. return frt.fd.Close()
  49. }
  50. func (frt *simpleRawTracepoint) Update(_ *ebpf.Program) error {
  51. return fmt.Errorf("update raw_tracepoint: %w", ErrNotSupported)
  52. }
  53. func (frt *simpleRawTracepoint) Pin(string) error {
  54. return fmt.Errorf("pin raw_tracepoint: %w", ErrNotSupported)
  55. }
  56. func (frt *simpleRawTracepoint) Unpin() error {
  57. return fmt.Errorf("unpin raw_tracepoint: %w", ErrNotSupported)
  58. }
  59. func (frt *simpleRawTracepoint) Info() (*Info, error) {
  60. return nil, fmt.Errorf("can't get raw_tracepoint info: %w", ErrNotSupported)
  61. }
  62. type rawTracepoint struct {
  63. RawLink
  64. }
  65. var _ Link = (*rawTracepoint)(nil)
  66. func (rt *rawTracepoint) Update(_ *ebpf.Program) error {
  67. return fmt.Errorf("update raw_tracepoint: %w", ErrNotSupported)
  68. }