{"id":288,"date":"2024-06-25T15:58:47","date_gmt":"2024-06-25T07:58:47","guid":{"rendered":"https:\/\/www.swreader.com\/?p=288"},"modified":"2024-06-25T16:35:29","modified_gmt":"2024-06-25T08:35:29","slug":"ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97","status":"publish","type":"post","link":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/","title":{"rendered":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357"},"content":{"rendered":"<p>\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ec Vagrant\u548c VirtualBox \u7684\u914d\u7f6e\uff0cTetragon \u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728 Docker \u4e2d\u7f16\u8bd1 Tetragon\uff0c\u5e76\u5728 Kubernetes \u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002<\/p>\n<h2>\u8c03\u8bd5\u4f9d\u8d56<\/h2>\n<p>tetragon github\u8bf4\u660e\u8c03\u8bd5\u90fd\u5728virtualbox\u4e2d\u8fdb\u884c\uff0c\u6240\u4ee5\u5f00\u59cb<mark style=\"color:red;\">\u8c03\u8bd5\u4e4b\u524d\u9700\u8981\u5b89\u88c5vagrant\u548cvirtualbox<\/mark>\u3002<\/p>\n<p>tetragon\u6e90\u7801\u4e2d\u6709\u63d0\u4f9bVagrant\uff0c\u901a\u8fc7Vagrant\u542f\u52a8virtualbox\u65f6\uff0c\u4f1a\u81ea\u52a8\u5b89\u88c5\u6240\u6709\u7684\u4f9d\u8d56\u548c\u5de5\u5177\u3002\u8be6\u60c5\u53c2\u8003tetragon\u6e90\u7801\u3002<\/p>\n<h2>\u542f\u52a8\u865a\u62df\u673a<\/h2>\n<p>\u901a\u8fc7\u4e0b\u9762\u7684\u547d\u4ee4\u542f\u52a8\u5e76\u767b\u9646\u5230virtualbox\u865a\u62df\u673a\uff1a<\/p>\n<pre><code class=\"language-bash\">vagrant up\nvagrant ssh<\/code><\/pre>\n<p>\u5728\u90e8\u5206vagrant\u8001\u7248\u672c\u4e0a\uff0cvagrant up\u53ef\u80fd\u4f1a\u62a5\u9519\uff0c\u53ef\u4ee5\u5220\u9664disk\u914d\u7f6e\u518d\u8bd5<\/p>\n<pre><code class=\"language-git\">diff --git a\/Vagrantfildiffe b\/Vagrantfile\n--- a\/Vagrantfile\n+++ b\/Vagrantfile\n@@ -1,6 +1,5 @@\n Vagrant.configure(&quot;2&quot;) do |config|\n   config.vm.box = &quot;ubuntu\/impish64&quot;\n-  config.vm.disk :disk, size: &quot;50GB&quot;\n   config.vm.provision :docker<\/code><\/pre>\n<h2>\u672c\u5730\u7f16\u8bd1<\/h2>\n<ul>\n<li>\u9996\u5148\u5b89\u88c5llvm\u548clibbpf\u7684\u4f9d\u8d56<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">make tools-install<\/code><\/pre>\n<ul>\n<li>\u7136\u540e\u7f16\u8bd1bpf\u7a0b\u5e8f\u548cgo\u7a0b\u5e8f<\/li>\n<\/ul>\n<pre><code class=\"language-bash\">LD_LIBRARY_PATH=$(realpath .\/lib) make<\/code><\/pre>\n<p>\u6b64\u547d\u4ee4\u4f1a\u7f16\u8bd1\u6240\u6709\u7684\u53ef\u6267\u884c\u7a0b\u5e8f\u548cTest\u7a0b\u5e8f\uff0c\u8c03\u8bd5\u8fc7\u7a0b\u4e2d\u4e3a\u4e86\u63d0\u9ad8\u6548\u7387\u53ef\u4ee5\u53ea\u7f16\u8bd1<mark style=\"color:red;\">tetra\u548ctetragon\u3002<\/mark><\/p>\n<pre><code class=\"language-bash\">LD_LIBRARY_PATH=$(realpath .\/lib) make tetra  tetragon<\/code><\/pre>\n<p>\u7136\u540e\u53ef\u4ee5\u770b\u5230\u672c\u5730\u751f\u6210\u4e86tetragon\u548ctetra\u7a0b\u5e8f\uff0c\u540e\u7eed\u4f1a\u8bf4\u660e\u5417\u8fd9\u4e24\u4e2a\u7a0b\u5e8f\u7684\u4f5c\u7528\u3002<\/p>\n<pre><code class=\"language-bash\"> ls  tetra*\ntetra  tetragon  tetragon-alignchecker<\/code><\/pre>\n<h2>\u672c\u5730\u8c03\u8bd5<\/h2>\n<h3>\u542f\u52a8tetragon<\/h3>\n<p>\u542f\u52a8\u7684\u65f6\u5019\u9700\u8981\u6307\u5b9aebpf .o\u6587\u4ef6\u5728\u90a3\u4e2a\u8def\u5f84\u4e0b\uff0c\u5e76\u4e14\u6307\u5b9atetragon\u5e93\u3002<\/p>\n<pre><code class=\"language-bash\">sudo LD_LIBRARY_PATH=$(realpath .\/lib) .\/tetragon --bpf-lib bpf\/objs<\/code><\/pre>\n<p>tetragon\u542f\u52a8\u4e4b\u540e\uff0c\u4f1a\u52a0\u8f7debpf\u7a0b\u5e8f\uff0c\u5e76\u4e14\u5728\u6307\u5b9a\u7aef\u53e3\uff08\u9ed8\u8ba4\u4e3a<mark style=\"color:red;\">localhost:54321<\/mark>\uff09\u7b49\u5f85listener\u7684\u94fe\u63a5\uff0clistener\u8fde\u63a5\u4e4b\u540e\uff0ctetragon\u4f1a\u628a\u76d1\u542c\u5230\u7684\u4e8b\u4ef6\u8f6c\u53d1\u7ed9listener\u3002<\/p>\n<p>tetragon\u542f\u52a8log\u5982\u4e0b\uff1a<\/p>\n<pre><code class=\"language-log\">time=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Starting tetragon&quot; version=v0.8.0-106-g5c3fd60\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;config settings&quot; \n     config=&quot;map[bpf-lib:bpf\/objs btf: cilium-bpf: config-dir: config-file: debug:false enable-cilium-api:false enable-export-aggregation:false enable-k8s-api:false enable-process-ancestors:true enable-process-cred:false enable-process-ns:false export-aggregation-buffer-size:10000 export-aggregation-window-size:15s export-allowlist: export-denylist: export-file-compress:false export-file-max-backups:5 export-file-max-size-mb:10 export-file-rotation-interval:0s export-filename: export-rate-limit:-1 force-small-progs:false ignore-missing-progs:false kernel: log-format:text log-level:info metrics-server: netns-dir:\/var\/run\/docker\/netns\/ process-cache-size:65536 procfs:\/proc\/ run-standalone:false server-address:localhost:54321 verbose:0]&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Available sensors&quot; sensors=\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Registered tracing sensors&quot; sensors=&quot;kprobe sensor, tracepoint sensor&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Registered probe types&quot; types=&quot;tracepoint sensor, kprobe sensor&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Disabling Kubernetes API&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Disabling Cilium API&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Starting process manager&quot; enableCilium=false enableEventCache=false enableProcessCred=false enableProcessNs=false\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Exporter configuration&quot; enabled=false fileName=\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Using metadata file&quot; metadata=\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Loading sensor&quot; name=__main__\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Loading kernel version 5.13.19&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Starting gRPC server&quot; address=&quot;localhost:54321&quot;\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;tetragon, map loaded.&quot; map=execve_map path=\/sys\/fs\/bpf\/tcpmon\/execve_map sensor=__main__\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;tetragon, map loaded.&quot; map=execve_map_stats path=\/sys\/fs\/bpf\/tcpmon\/execve_map_stats sensor=__main__\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;tetragon, map loaded.&quot; map=names_map path=\/sys\/fs\/bpf\/tcpmon\/names_map sensor=__main__\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;tetragon, map loaded.&quot; map=tcpmon_map path=\/sys\/fs\/bpf\/tcpmon\/tcpmon_map sensor=__main__\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;BPF prog was loaded&quot; label=tracepoint\/sys_exit prog=bpf\/objs\/bpf_exit.o\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;BPF prog was loaded&quot; label=kprobe\/wake_up_new_task prog=bpf\/objs\/bpf_fork.o\ntime=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Load probe&quot; Program=bpf\/objs\/bpf_execve_event_v53.o Type=execve\ntime=&quot;2022-05-29T10:37:57Z&quot; level=info msg=&quot;Read ProcFS \/proc\/ appended 74\/218 entries&quot;\ntime=&quot;2022-05-29T10:37:57Z&quot; level=warning msg=&quot;Procfs execve event pods\/ identifier error&quot; error=&quot;open \/proc\/0\/cgroup: no such file or directory&quot;\ntime=&quot;2022-05-29T10:37:57Z&quot; level=info msg=&quot;BPF prog was loaded&quot; label=tracepoint\/sys_execve prog=bpf\/objs\/bpf_execve_event_v53.o\ntime=&quot;2022-05-29T10:37:57Z&quot; level=info msg=&quot;Loaded BPF maps and events for sensor successfully&quot; sensor=__main__\ntime=&quot;2022-05-29T10:37:57Z&quot; level=info msg=&quot;Listening for events...&quot;<\/code><\/pre>\n<p>\u4ecelog\u4e2d\u53ef\u4ee5\u770b\u5230<mark style=\"color:orange;\">tetragon\u542f\u52a8\u7684config\u53c2\u6570<\/mark>\uff08\u7b2c\u4e8c\u884c\uff09\uff0c\u8fd8\u6709tetragon\u7684version\u7b49\u7b49\u3002<\/p>\n<h3>\u4fee\u6539\u9ed8\u8ba4log\u7b49\u7ea7<\/h3>\n<p>\u4ececonfig\u53c2\u6570\u4e2d\u53ef\u4ee5\u770b\u5230\uff0c\u9ed8\u8ba4\u7684log\u7ea7\u522b\u662finfo\uff0c\u5982\u679c\u4fee\u6539log\u7b49\u7ea7\u4e3adebug\uff0c\u9700\u8981\u5728\u542f\u52a8\u65f6\u6dfb\u52a0-<mark style=\"color:red;\">-log-level=debug<\/mark>\u53c2\u6570\u3002<\/p>\n<pre><code class=\"language-bash\">sudo LD_LIBRARY_PATH=$(realpath .\/lib) .\/tetragon --bpf-lib bpf\/objs --log-level=debug<\/code><\/pre>\n<h3>\u542f\u52a8listerner\uff1atetra<\/h3>\n<p>tetra\u662ftetragon\u7684\u4e00\u4e2aCLI\u8c03\u8bd5\u5de5\u5177\uff0ctetra\u7684\u5177\u4f53\u53c2\u6570\u548c\u7528\u6cd5\u53ef\u4ee5\u901a\u8fc7\u76f4\u63a5\u6267\u884ctetra\u67e5\u770b\u3002<\/p>\n<pre><code class=\"language-bash\">Tetragon CLI\n\nUsage:\n  tetra [flags]\n  tetra [command]\n\nAvailable Commands:\n  bugtool         Produce a tar archive with debug information\n  getevents       Print events\n  help            Help about any command\n  sensors         Manage sensors\n  stacktrace-tree Manage stacktrace trees\n  status          Print health status\n  tracingpolicy   Manage tracing policies\n  version         Print version\n\nFlags:\n  -d, --debug                   Enable debug messages\n  -h, --help                    help for tetra\n      --server-address string   gRPC server address (default &quot;localhost:54321&quot;)\n\nUse &quot;tetra [command] --help&quot; for more information about a command.<\/code><\/pre>\n<p>\u901a\u8fc7<mark style=\"color:red;\">tetra getevents<\/mark>\u53ef\u4ee5\u83b7\u53d6tetragon\u53d1\u9001\u7684ebpf\u4e8b\u4ef6\u3002tetra\u9ed8\u8ba4\u4ee5json\u683c\u5f0f\u8f93\u51fa\uff0c\u4f8b\u5982\uff1a<\/p>\n<pre><code class=\"language-bash\"> $ .\/tetra getevents | jq &quot;.&quot;\n{\n  &quot;process_exec&quot;: {\n    &quot;process&quot;: {\n      &quot;exec_id&quot;: &quot;OjI0Njk4Mjk4ODYxNDI6MTI0NDE=&quot;,\n      &quot;pid&quot;: 12441,\n      &quot;uid&quot;: 0,\n      &quot;cwd&quot;: &quot;\/run\/containerd\/io.containerd.runtime.v2.task\/k8s.io\/25ecffd7e2ee8332923500bd930eaebe2725bb643e7e9e2206b611f8666abac0\/&quot;,\n      &quot;binary&quot;: &quot;\/usr\/local\/sbin\/runc&quot;,\n      &quot;arguments&quot;: &quot;--root \/run\/containerd\/runc\/k8s.io --log \/run\/containerd\/io.containerd.runtime.v2.task\/k8s.io\/c7c9f733b618c7b46f0bd86e054fc5d940fbd7eb627cf009d6d9cd0584c846a6\/log.json --log-format json exec --process \/tmp\/runc-process789407863 --detach --pid-file \/run\/containerd\/io.containerd.runtime.v2.task\/k8s.io\/c7c9f733b618c7b46f0bd86e054fc5d940fbd7eb627cf009d6d9cd0584c846a6\/4c9ea3805e0d2a23de4c0cdb983c52db832689aa821d3363ba8954b1b76359d9.pid c7c9f733b618c7b46f0bd86e054fc5d940fbd7eb627cf009d6d9cd0584c846a6&quot;,\n      &quot;flags&quot;: &quot;execve clone&quot;,\n      &quot;start_time&quot;: &quot;2022-05-29T10:54:19.452Z&quot;,\n      &quot;auid&quot;: 4294967295,\n      &quot;parent_exec_id&quot;: &quot;OjMzMzgwMDAwMDAwOjI0NzM=&quot;,\n      &quot;refcnt&quot;: 1\n    },\n    &quot;parent&quot;: {\n      &quot;exec_id&quot;: &quot;OjMzMzgwMDAwMDAwOjI0NzM=&quot;,\n      &quot;pid&quot;: 2473,\n      &quot;uid&quot;: 0,\n      &quot;cwd&quot;: &quot;\/run\/containerd\/io.containerd.runtime.v2.task\/k8s.io\/25ecffd7e2ee8332923500bd930eaebe2725bb643e7e9e2206b611f8666abac0&quot;,\n      &quot;binary&quot;: &quot;\/usr\/local\/bin\/containerd-shim-runc-v2&quot;,\n      &quot;arguments&quot;: &quot;-namespace k8s.io -id 25ecffd7e2ee8332923500bd930eaebe2725bb643e7e9e2206b611f8666abac0 -address \/run\/containerd\/containerd.sock&quot;,\n      &quot;flags&quot;: &quot;procFS auid&quot;,\n      &quot;start_time&quot;: &quot;2022-05-29T10:13:43.002Z&quot;,\n      &quot;auid&quot;: 0,\n      &quot;parent_exec_id&quot;: &quot;OjIyODIwMDAwMDAwOjExOTE=&quot;,\n      &quot;refcnt&quot;: 4294967265\n    }\n  },\n  &quot;time&quot;: &quot;2022-05-29T10:54:19.452Z&quot;\n}<\/code><\/pre>\n<p>\u901a\u8fc7<mark style=\"color:red;\">tetra getevents &#8211;output compact<\/mark> <mark style=\"color:blue;\">\u80fd\u83b7\u53d6\u5230\u66f4\u53cb\u597d\u7684\u8f93\u51fa\u3002<\/mark><\/p>\n<pre><code class=\"language-bash\">.\/tetra getevents --output compact\n\ud83d\ude80 process  \/usr\/sbin\/iptables -w 5 -W 100000 -S KUBE-KUBELET-CANARY -t mangle \n\ud83d\udca5 exit     \/usr\/sbin\/iptables -w 5 -W 100000 -S KUBE-KUBELET-CANARY -t mangle 0 \n\ud83d\ude80 process  \/usr\/sbin\/ip6tables -w 5 -W 100000 -S KUBE-KUBELET-CANARY -t mangle \n\ud83d\udca5 exit     \/usr\/sbin\/ip6tables -w 5 -W 100000 -S KUBE-KUBELET-CANARY -t mangle 0 <\/code><\/pre>\n<h2>docker\u4e2d\u7f16\u8bd1<\/h2>\n<p>docker\u4e2d\u7f16\u8bd1\u7684\u547d\u4ee4\u5982\u4e0b\uff0c\u5728docker\u4e2d\u7f16\u8bd1\u9ed8\u8ba4\u4f1a\u6253\u5305docker\u955c\u50cf\uff0c\u8be6\u7ec6\u53c2\u8003Makefile\u3002<\/p>\n<pre><code class=\"language-bash\"># Build Tetragon agent and operator images\nLD_LIBRARY_PATH=$(realpath .\/lib) make LOCAL_CLANG=0 image image-operator\n\n# Bootstrap the cluster\ncontrib\/localdev\/bootstrap-kind-cluster.sh\n\n# Install Tetragon\ncontrib\/localdev\/install-tetragon.sh --image cilium\/tetragon:latest --operator cilium\/tetragon-operator:latest<\/code><\/pre>\n<p>\u6574\u4e2a\u8fc7\u7a0b\u56e0\u4e3a\u4f1a\u6309\u7167kind\u5de5\u5177\uff0c\u5e76\u4e14\u901a\u8fc7kind \u5b89\u88c5\u5355\u8282\u70b9k8s cluster\uff0c\u6240\u4ee5\u4f1a\u6bd4\u8f83\u6162\u3002<\/p>\n<p>\u7f16\u8bd1\u4e4b\u540e\uff0ctettagon\u4f1a\u88ab\u90e8\u7f72\u5728k8s cluster\u4e2d\uff0c\u53ef\u4ee5\u901a\u8fc7kubectl\u547d\u4ee4\u67e5\u770b\u3002<\/p>\n<pre><code>kubectl get pods -n kube-system<\/code><\/pre>\n<h2>k8s cluster\u4e2d\u8c03\u8bd5<\/h2>\n<p>\u5f53tetragon\u5728k8s cluster\u4e2d\u90e8\u7f72\u4e4b\u540e\uff0c\u901a\u8fc7\u4e0b\u9762\u7684\u547d\u4ee4\u67e5\u67e5\u770b\u4e8b\u4ef6\u4e0a\u62a5\uff0c\u8f93\u51fa\u7684log\u6bd4\u8f83\u591a\uff08json\u683c\u5f0f\uff09\uff0c\u53ef\u4ee5\u901a\u8fc7jq\u547d\u4ee4\u8fdb\u884c\u65e5\u5fd7\u8fc7\u6ee4\u3002<\/p>\n<pre><code>kubectl logs -n kube-system ds\/tetragon -c export-stdout -f<\/code><\/pre>\n<p>\u53c2\u8003 <a href=\"https:\/\/github.com\/cilium\/tetragon\" title=\"tetragon\">tetragon<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ec Vagrant\u548c VirtualBox \u7684\u914d\u7f6e\uff0cTetragon \u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728 Docker \u4e2d\u7f16\u8bd1 Tetragon\uff0c\u5e76\u5728 Kubernetes \u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002 \u8c03\u8bd5\u4f9d\u8d56 tetragon github\u8bf4\u660e\u8c03\u8bd5\u90fd\u5728virtualbox\u4e2d\u8fdb\u884c\uff0c\u6240\u4ee5\u5f00\u59cb\u8c03\u8bd5\u4e4b\u524d\u9700\u8981\u5b89\u88c5vagrant\u548cvirtualbox\u3002 tetragon\u6e90\u7801\u4e2d\u6709\u63d0\u4f9bVagrant\uff0c\u901a\u8fc7Vagrant\u542f\u52a8virtualbox\u65f6\uff0c\u4f1a\u81ea\u52a8\u5b89\u88c5\u6240\u6709\u7684\u4f9d\u8d56\u548c\u5de5\u5177\u3002\u8be6\u60c5\u53c2\u8003tetragon\u6e90\u7801\u3002 \u542f\u52a8\u865a\u62df\u673a \u901a\u8fc7\u4e0b\u9762\u7684\u547d\u4ee4\u542f\u52a8\u5e76\u767b\u9646\u5230virtualbox\u865a\u62df\u673a\uff1a vagrant up vagrant ssh \u5728\u90e8\u5206vagrant\u8001\u7248\u672c\u4e0a\uff0cvagrant up\u53ef\u80fd\u4f1a\u62a5\u9519\uff0c\u53ef\u4ee5\u5220\u9664disk\u914d\u7f6e\u518d\u8bd5 diff &#8211;git a\/Vagrantfildiffe b\/Vagrantfile &#8212; a\/Vagrantfile +++ b\/Vagrantfile @@ -1,6 +1,5 @@ Vagrant.configure(&quot;2&quot;) do |config| config.vm.box = &quot;ubuntu\/impish64&quot; &#8211; config.vm.disk :disk, size: &quot;50GB&quot; config.vm.provision :docker \u672c\u5730\u7f16\u8bd1 \u9996\u5148\u5b89\u88c5llvm\u548clibbpf\u7684\u4f9d\u8d56 make tools-install \u7136\u540e\u7f16\u8bd1bpf\u7a0b\u5e8f\u548cgo\u7a0b\u5e8f LD_LIBRARY_PATH=$(realpath .\/lib) make \u6b64\u547d\u4ee4\u4f1a\u7f16\u8bd1\u6240\u6709\u7684\u53ef\u6267\u884c\u7a0b\u5e8f\u548cTest\u7a0b\u5e8f\uff0c\u8c03\u8bd5\u8fc7\u7a0b\u4e2d\u4e3a\u4e86\u63d0\u9ad8\u6548\u7387\u53ef\u4ee5\u53ea\u7f16\u8bd1tetra\u548ctetragon\u3002 LD_LIBRARY_PATH=$(realpath .\/lib) make tetra tetragon \u7136\u540e\u53ef\u4ee5\u770b\u5230\u672c\u5730\u751f\u6210\u4e86tetragon\u548ctetra\u7a0b\u5e8f\uff0c\u540e\u7eed\u4f1a\u8bf4\u660e\u5417\u8fd9\u4e24\u4e2a\u7a0b\u5e8f\u7684\u4f5c\u7528\u3002 ls tetra* tetra tetragon tetragon-alignchecker \u672c\u5730\u8c03\u8bd5 \u542f\u52a8tetragon \u542f\u52a8\u7684\u65f6\u5019\u9700\u8981\u6307\u5b9aebpf .o\u6587\u4ef6\u5728\u90a3\u4e2a\u8def\u5f84\u4e0b\uff0c\u5e76\u4e14\u6307\u5b9atetragon\u5e93\u3002 sudo LD_LIBRARY_PATH=$(realpath .\/lib) .\/tetragon &#8211;bpf-lib bpf\/objs tetragon\u542f\u52a8\u4e4b\u540e\uff0c\u4f1a\u52a0\u8f7debpf\u7a0b\u5e8f\uff0c\u5e76\u4e14\u5728\u6307\u5b9a\u7aef\u53e3\uff08\u9ed8\u8ba4\u4e3alocalhost:54321\uff09\u7b49\u5f85listener\u7684\u94fe\u63a5\uff0clistener\u8fde\u63a5\u4e4b\u540e\uff0ctetragon\u4f1a\u628a\u76d1\u542c\u5230\u7684\u4e8b\u4ef6\u8f6c\u53d1\u7ed9listener\u3002 tetragon\u542f\u52a8log\u5982\u4e0b\uff1a time=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;Starting tetragon&quot; version=v0.8.0-106-g5c3fd60 time=&quot;2022-05-29T10:37:56Z&quot; level=info msg=&quot;config settings&quot; config=&quot;map[bpf-lib:bpf\/objs btf: cilium-bpf: config-dir: config-file: debug:false enable-cilium-api:false enable-export-aggregation:false enable-k8s-api:false enable-process-ancestors:true enable-process-cred:false enable-process-ns:false export-aggregation-buffer-size:10000 export-aggregation-window-size:15s export-allowlist: export-denylist: export-file-compress:false export-file-max-backups:5 export-file-max-size-mb:10 export-file-rotation-interval:0s export-filename: export-rate-limit:-1 force-small-progs:false ignore-missing-progs:false kernel: log-format:text log-level:info metrics-serve&#8230;<\/p>\n","protected":false},"author":1,"featured_media":292,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png","fifu_image_alt":"Tetragon ebpf","footnotes":""},"categories":[183,232,179,10],"tags":[25,158,5,234],"class_list":["post-288","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-docker-zh","category-ebpf","category-kubernetes-zh","category-linux","tag-debug","tag-ebpf","tag-linux","tag-tetragon"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog<\/title>\n<meta name=\"description\" content=\"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog\" \/>\n<meta property=\"og:description\" content=\"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\/\" \/>\n<meta property=\"og:site_name\" content=\"TianYa Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-25T07:58:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-25T08:35:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png\" \/><meta property=\"og:image\" content=\"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"765\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"zdm\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"zdm\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/\"},\"author\":{\"name\":\"zdm\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#\\\/schema\\\/person\\\/9c90501e33afc9307d757bc8cfaf1c6f\"},\"headline\":\"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\",\"datePublished\":\"2024-06-25T07:58:47+00:00\",\"dateModified\":\"2024-06-25T08:35:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/\"},\"wordCount\":105,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#\\\/schema\\\/person\\\/9c90501e33afc9307d757bc8cfaf1c6f\"},\"image\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.swreader.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/ogimage-9.jpg\",\"keywords\":[\"Debug\",\"Ebpf\",\"linux\",\"Tetragon\"],\"articleSection\":[\"Docker\",\"Ebpf\",\"Kubernetes\",\"linux\"],\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/\",\"url\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/\",\"name\":\"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.swreader.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/ogimage-9.jpg\",\"datePublished\":\"2024-06-25T07:58:47+00:00\",\"dateModified\":\"2024-06-25T08:35:29+00:00\",\"description\":\"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.swreader.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/ogimage-9.jpg\",\"contentUrl\":\"https:\\\/\\\/www.swreader.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/ogimage-9.jpg\",\"width\":1200,\"height\":624},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/2024\\\/06\\\/25\\\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\\\/\\\/www.swreader.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#website\",\"url\":\"https:\\\/\\\/www.swreader.com\\\/\",\"name\":\"TianYa Blog\",\"description\":\"Technology And Life\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#\\\/schema\\\/person\\\/9c90501e33afc9307d757bc8cfaf1c6f\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.swreader.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-Hans\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.swreader.com\\\/#\\\/schema\\\/person\\\/9c90501e33afc9307d757bc8cfaf1c6f\",\"name\":\"zdm\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g\",\"caption\":\"zdm\"},\"logo\":{\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g\"},\"sameAs\":[\"http:\\\/\\\/www.swreader.com\"],\"url\":\"https:\\\/\\\/www.swreader.com\\\/index.php\\\/author\\\/zdm\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog","description":"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\/","og_locale":"zh_CN","og_type":"article","og_title":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog","og_description":"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002","og_url":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357\/","og_site_name":"TianYa Blog","article_published_time":"2024-06-25T07:58:47+00:00","article_modified_time":"2024-06-25T08:35:29+00:00","og_image":[{"url":"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png","type":"","width":"","height":""},{"width":1600,"height":765,"url":"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png","type":"image\/jpeg"}],"author":"zdm","twitter_card":"summary_large_image","twitter_image":"https:\/\/miro.medium.com\/v2\/resize:fit:2000\/1*OdYWJV-jko9hiYBb9er6qQ.png","twitter_misc":{"\u4f5c\u8005":"zdm","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#article","isPartOf":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/"},"author":{"name":"zdm","@id":"https:\/\/www.swreader.com\/#\/schema\/person\/9c90501e33afc9307d757bc8cfaf1c6f"},"headline":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357","datePublished":"2024-06-25T07:58:47+00:00","dateModified":"2024-06-25T08:35:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/"},"wordCount":105,"commentCount":1,"publisher":{"@id":"https:\/\/www.swreader.com\/#\/schema\/person\/9c90501e33afc9307d757bc8cfaf1c6f"},"image":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#primaryimage"},"thumbnailUrl":"https:\/\/www.swreader.com\/wp-content\/uploads\/2024\/06\/ogimage-9.jpg","keywords":["Debug","Ebpf","linux","Tetragon"],"articleSection":["Docker","Ebpf","Kubernetes","linux"],"inLanguage":"zh-Hans","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/","url":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/","name":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357 - TianYa Blog","isPartOf":{"@id":"https:\/\/www.swreader.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#primaryimage"},"image":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#primaryimage"},"thumbnailUrl":"https:\/\/www.swreader.com\/wp-content\/uploads\/2024\/06\/ogimage-9.jpg","datePublished":"2024-06-25T07:58:47+00:00","dateModified":"2024-06-25T08:35:29+00:00","description":"\u8fd9\u7bc7\u6587\u7ae0\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u57fa\u4e8e ebpf \u7684 Tetragon \u5de5\u5177\u7684\u672c\u5730\u7f16\u8bd1\u548c\u8c03\u8bd5\u65b9\u6cd5\u3002\u5305\u62ecVagrant\u548cVirtualBox\u7684\u914d\u7f6e\uff0cTetragon\u548cTetra\u8c03\u8bd5\u5de5\u5177\u6355\u83b7\u548c\u5206\u6790eBPF\u4e8b\u4ef6\u7684\u65b9\u6cd5\u7b49\uff1b\u4ee5\u53ca\u5728Docker\u4e2d\u7f16\u8bd1Tetragon\uff0c\u5e76\u5728Kubernetes\u96c6\u7fa4\u4e2d\u8c03\u8bd5\u7684\u8fc7\u7a0b\u3002","breadcrumb":{"@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/"]}]},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#primaryimage","url":"https:\/\/www.swreader.com\/wp-content\/uploads\/2024\/06\/ogimage-9.jpg","contentUrl":"https:\/\/www.swreader.com\/wp-content\/uploads\/2024\/06\/ogimage-9.jpg","width":1200,"height":624},{"@type":"BreadcrumbList","@id":"https:\/\/www.swreader.com\/index.php\/2024\/06\/25\/ebpf-tetragon%e7%bc%96%e8%af%91%e5%92%8c%e8%b0%83%e8%af%95%e6%8c%87%e5%8d%97\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.swreader.com\/"},{"@type":"ListItem","position":2,"name":"Ebpf Tetragon\u7f16\u8bd1\u548c\u8c03\u8bd5\u6307\u5357"}]},{"@type":"WebSite","@id":"https:\/\/www.swreader.com\/#website","url":"https:\/\/www.swreader.com\/","name":"TianYa Blog","description":"Technology And Life","publisher":{"@id":"https:\/\/www.swreader.com\/#\/schema\/person\/9c90501e33afc9307d757bc8cfaf1c6f"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.swreader.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-Hans"},{"@type":["Person","Organization"],"@id":"https:\/\/www.swreader.com\/#\/schema\/person\/9c90501e33afc9307d757bc8cfaf1c6f","name":"zdm","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/secure.gravatar.com\/avatar\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g","caption":"zdm"},"logo":{"@id":"https:\/\/secure.gravatar.com\/avatar\/2670c9b6412a56381880b2ca03988f659e8a378fe7332238a4a741b660a60997?s=96&d=mm&r=g"},"sameAs":["http:\/\/www.swreader.com"],"url":"https:\/\/www.swreader.com\/index.php\/author\/zdm\/"}]}},"_links":{"self":[{"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/posts\/288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/comments?post=288"}],"version-history":[{"count":0,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/posts\/288\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/media\/292"}],"wp:attachment":[{"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/media?parent=288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/categories?post=288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.swreader.com\/index.php\/wp-json\/wp\/v2\/tags?post=288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}