From 91366503383e0043e0a137603f898d2b2744708c Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 16 Oct 2024 16:29:12 +0200 Subject: [PATCH 01/45] fix(modern): check `cred` field is not NULL before the access Signed-off-by: Andrea Terzolo --- .../helpers/extract/extract_from_kernel.h | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/driver/modern_bpf/helpers/extract/extract_from_kernel.h b/driver/modern_bpf/helpers/extract/extract_from_kernel.h index 532f53d8ed..073321b0c4 100644 --- a/driver/modern_bpf/helpers/extract/extract_from_kernel.h +++ b/driver/modern_bpf/helpers/extract/extract_from_kernel.h @@ -374,15 +374,15 @@ static __always_inline uint64_t extract__capability(struct task_struct *task, switch(capability_type) { case CAP_INHERITABLE: - READ_TASK_FIELD_INTO(&cap_struct, task, cred, cap_inheritable); + BPF_CORE_READ_INTO(&cap_struct, task, cred, cap_inheritable); break; case CAP_PERMITTED: - READ_TASK_FIELD_INTO(&cap_struct, task, cred, cap_permitted); + BPF_CORE_READ_INTO(&cap_struct, task, cred, cap_permitted); break; case CAP_EFFECTIVE: - READ_TASK_FIELD_INTO(&cap_struct, task, cred, cap_effective); + BPF_CORE_READ_INTO(&cap_struct, task, cred, cap_effective); break; default: @@ -729,7 +729,7 @@ static __always_inline unsigned long extract__clone_flags(struct task_struct *ta */ static __always_inline void extract__euid(struct task_struct *task, uint32_t *euid) { *euid = UINT32_MAX; - READ_TASK_FIELD_INTO(euid, task, cred, euid.val); + BPF_CORE_READ_INTO(euid, task, cred, euid.val); } /** @@ -739,7 +739,7 @@ static __always_inline void extract__euid(struct task_struct *task, uint32_t *eu * @param egid return value by reference */ static __always_inline void extract__egid(struct task_struct *task, uint32_t *egid) { - READ_TASK_FIELD_INTO(egid, task, cred, egid.val); + BPF_CORE_READ_INTO(egid, task, cred, egid.val); } ///////////////////////// @@ -885,7 +885,7 @@ static __always_inline uint32_t bpf_map_id_up(struct uid_gid_map *map, uint32_t static __always_inline bool groups_search(struct task_struct *task, uint32_t grp) { struct group_info *group_info = NULL; - READ_TASK_FIELD_INTO(&group_info, task, cred, group_info); + BPF_CORE_READ_INTO(&group_info, task, cred, group_info); if(!group_info) { return false; } @@ -934,8 +934,8 @@ static __always_inline bool extract__exe_writable(struct task_struct *task, stru uint32_t fsuid; uint32_t fsgid; - READ_TASK_FIELD_INTO(&fsuid, task, cred, fsuid.val); - READ_TASK_FIELD_INTO(&fsgid, task, cred, fsgid.val); + BPF_CORE_READ_INTO(&fsuid, task, cred, fsuid.val); + BPF_CORE_READ_INTO(&fsgid, task, cred, fsgid.val); /* HAS_UNMAPPED_ID() */ if(i_uid == -1 || i_gid == -1) { @@ -978,7 +978,7 @@ static __always_inline bool extract__exe_writable(struct task_struct *task, stru } struct user_namespace *ns; - READ_TASK_FIELD_INTO(&ns, task, cred, user_ns); + BPF_CORE_READ_INTO(&ns, task, cred, user_ns); if(ns == NULL) { return false; } @@ -986,7 +986,7 @@ static __always_inline bool extract__exe_writable(struct task_struct *task, stru bool kgid_mapped = bpf_map_id_up(&ns->gid_map, i_gid) != (uint32_t)-1; kernel_cap_t cap_struct = {0}; - READ_TASK_FIELD_INTO(&cap_struct, task, cred, cap_effective); + BPF_CORE_READ_INTO(&cap_struct, task, cred, cap_effective); // Kernel 6.3 changed the kernel_cap_struct type from uint32_t[2] to uint64_t. // Luckily enough, it also changed field name from cap to val. if(bpf_core_field_exists(((struct kernel_cap_struct *)0)->cap)) { From e214eb33b1126e31f92ac66d7c9b8526cbe48cdc Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 12:09:13 +0100 Subject: [PATCH 02/45] cleanup: move `sched_p_exec` tail calls With this new approach the tail calls are only visible inside the sched_proc_exec file. Signed-off-by: Andrea Terzolo --- .../attached/events/sched_process_exec.bpf.c | 37 +++++++++++++++++-- driver/ppm_events_public.h | 3 +- userspace/libpman/src/events_prog_names.h | 4 -- 3 files changed, 35 insertions(+), 9 deletions(-) diff --git a/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c b/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c index a8ce62ca52..53c678fd0c 100644 --- a/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c @@ -13,6 +13,37 @@ * struct linux_binprm *bprm) */ #ifdef CAPTURE_SCHED_PROC_EXEC + +enum extra_sched_proc_exec_codes { + T1_SCHED_PROC_EXEC, + T2_SCHED_PROC_EXEC, + // add more codes here. + T_SCHED_PROC_EXEC_MAX, +}; + +/* + * FORWARD DECLARATIONS: + * See the `BPF_PROG` macro in libbpf `libbpf/src/bpf_tracing.h` + * #define BPF_PROG(name, args...) \ + * name(unsigned long long *ctx); \ + */ +int t1_sched_p_exec(unsigned long long *ctx); +int t2_sched_p_exec(unsigned long long *ctx); + +struct { + __uint(type, BPF_MAP_TYPE_PROG_ARRAY); + __uint(max_entries, T_SCHED_PROC_EXEC_MAX); + __uint(key_size, sizeof(__u32)); + __array(values, int(void *)); +} extra_sched_proc_exec_calls SEC(".maps") = { + .values = + { + [T1_SCHED_PROC_EXEC] = (void *)&t1_sched_p_exec, + [T2_SCHED_PROC_EXEC] = (void *)&t2_sched_p_exec, + // add more tail calls here. + }, +}; + /* chose a short name for bpftool debugging*/ SEC("tp_btf/sched_process_exec") int BPF_PROG(sched_p_exec, struct task_struct *p, pid_t old_pid, struct linux_binprm *bprm) { @@ -114,7 +145,7 @@ int BPF_PROG(sched_p_exec, struct task_struct *p, pid_t old_pid, struct linux_bi /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_SCHED_PROC_EXEC); + bpf_tail_call(ctx, &extra_sched_proc_exec_calls, T1_SCHED_PROC_EXEC); return 0; } @@ -234,11 +265,11 @@ int BPF_PROG(t1_sched_p_exec, struct task_struct *p, pid_t old_pid, struct linux /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_SCHED_PROC_EXEC); + bpf_tail_call(ctx, &extra_sched_proc_exec_calls, T2_SCHED_PROC_EXEC); return 0; } -SEC("tp_btf/sys_exit") +SEC("tp_btf/sched_process_exec") int BPF_PROG(t2_sched_p_exec, struct pt_regs *regs, long ret) { struct auxiliary_map *auxmap = auxmap__get(); if(!auxmap) { diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h index 7d01ab76d4..f7d9890ac3 100644 --- a/driver/ppm_events_public.h +++ b/driver/ppm_events_public.h @@ -1525,6 +1525,7 @@ typedef enum { * - `X` = means that we need this extra tail call for the exit event, `E` means enter the event. * */ +// todo!: rename this `extra_syscall_exit_calls`. enum extra_event_prog_code { T1_EXECVE_X = 0, T1_EXECVEAT_X = 1, @@ -1532,7 +1533,6 @@ enum extra_event_prog_code { T1_CLONE3_X = 3, T1_FORK_X = 4, T1_VFORK_X = 5, - T1_SCHED_PROC_EXEC = 6, T1_SCHED_PROC_FORK = 7, T2_SCHED_PROC_FORK = 8, T2_CLONE_X = 9, @@ -1545,7 +1545,6 @@ enum extra_event_prog_code { T1_OPEN_BY_HANDLE_AT_X = 16, T2_EXECVE_X = 17, T2_EXECVEAT_X = 18, - T2_SCHED_PROC_EXEC = 19, TAIL_EXTRA_EVENT_PROG_MAX = 20 }; diff --git a/userspace/libpman/src/events_prog_names.h b/userspace/libpman/src/events_prog_names.h index ed2577ec0d..f8b7cdc878 100644 --- a/userspace/libpman/src/events_prog_names.h +++ b/userspace/libpman/src/events_prog_names.h @@ -349,10 +349,6 @@ static const char* extra_event_prog_names[TAIL_EXTRA_EVENT_PROG_MAX] = { [T1_CLONE3_X] = "t1_clone3_x", [T1_FORK_X] = "t1_fork_x", [T1_VFORK_X] = "t1_vfork_x", -#ifdef CAPTURE_SCHED_PROC_EXEC - [T1_SCHED_PROC_EXEC] = "t1_sched_p_exec", - [T2_SCHED_PROC_EXEC] = "t2_sched_p_exec", -#endif #ifdef CAPTURE_SCHED_PROC_FORK [T1_SCHED_PROC_FORK] = "t1_sched_p_fork", [T2_SCHED_PROC_FORK] = "t2_sched_p_fork", From e9a8cedd78a7f742d1a6e216d6cb36fcfa2bd98d Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 12:39:26 +0100 Subject: [PATCH 03/45] cleanup: move `sched_p_fork` tail calls Signed-off-by: Andrea Terzolo --- .../attached/events/sched_process_fork.bpf.c | 35 +++++++++++++++++-- driver/ppm_events_public.h | 2 -- userspace/libpman/src/events_prog_names.h | 4 --- 3 files changed, 33 insertions(+), 8 deletions(-) diff --git a/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c b/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c index f33ccd440a..059b5a5646 100644 --- a/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c @@ -14,6 +14,37 @@ */ #ifdef CAPTURE_SCHED_PROC_FORK + +enum extra_sched_proc_fork_codes { + T1_SCHED_PROC_FORK, + T2_SCHED_PROC_FORK, + // add more codes here. + T_SCHED_PROC_FORK_MAX, +}; + +/* + * FORWARD DECLARATIONS: + * See the `BPF_PROG` macro in libbpf `libbpf/src/bpf_tracing.h` + * #define BPF_PROG(name, args...) \ + * name(unsigned long long *ctx); \ + */ +int t1_sched_p_fork(unsigned long long *ctx); +int t2_sched_p_fork(unsigned long long *ctx); + +struct { + __uint(type, BPF_MAP_TYPE_PROG_ARRAY); + __uint(max_entries, T_SCHED_PROC_FORK_MAX); + __uint(key_size, sizeof(__u32)); + __array(values, int(void *)); +} extra_sched_proc_fork_calls SEC(".maps") = { + .values = + { + [T1_SCHED_PROC_FORK] = (void *)&t1_sched_p_fork, + [T2_SCHED_PROC_FORK] = (void *)&t2_sched_p_fork, + // add more tail calls here. + }, +}; + /* chose a short name for bpftool debugging*/ SEC("tp_btf/sched_process_fork") int BPF_PROG(sched_p_fork, struct task_struct *parent, struct task_struct *child) { @@ -128,7 +159,7 @@ int BPF_PROG(sched_p_fork, struct task_struct *parent, struct task_struct *child /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_SCHED_PROC_FORK); + bpf_tail_call(ctx, &extra_sched_proc_fork_calls, T1_SCHED_PROC_FORK); return 0; } @@ -206,7 +237,7 @@ int BPF_PROG(t1_sched_p_fork, struct task_struct *parent, struct task_struct *ch /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_SCHED_PROC_FORK); + bpf_tail_call(ctx, &extra_sched_proc_fork_calls, T2_SCHED_PROC_FORK); return 0; } diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h index f7d9890ac3..e85e566f5b 100644 --- a/driver/ppm_events_public.h +++ b/driver/ppm_events_public.h @@ -1533,8 +1533,6 @@ enum extra_event_prog_code { T1_CLONE3_X = 3, T1_FORK_X = 4, T1_VFORK_X = 5, - T1_SCHED_PROC_FORK = 7, - T2_SCHED_PROC_FORK = 8, T2_CLONE_X = 9, T2_CLONE3_X = 10, T2_FORK_X = 11, diff --git a/userspace/libpman/src/events_prog_names.h b/userspace/libpman/src/events_prog_names.h index f8b7cdc878..d896f606b9 100644 --- a/userspace/libpman/src/events_prog_names.h +++ b/userspace/libpman/src/events_prog_names.h @@ -349,10 +349,6 @@ static const char* extra_event_prog_names[TAIL_EXTRA_EVENT_PROG_MAX] = { [T1_CLONE3_X] = "t1_clone3_x", [T1_FORK_X] = "t1_fork_x", [T1_VFORK_X] = "t1_vfork_x", -#ifdef CAPTURE_SCHED_PROC_FORK - [T1_SCHED_PROC_FORK] = "t1_sched_p_fork", - [T2_SCHED_PROC_FORK] = "t2_sched_p_fork", -#endif [T2_CLONE_X] = "t2_clone_x", [T2_CLONE3_X] = "t2_clone3_x", [T2_FORK_X] = "t2_fork_x", From 00a6a39612327cf1717a655756834ef0220c6c49 Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 14:34:58 +0100 Subject: [PATCH 04/45] cleanup: move `hotplug` logic into sys_exit Signed-off-by: Andrea Terzolo --- driver/modern_bpf/helpers/store/auxmap_store_params.h | 5 +++-- driver/modern_bpf/helpers/store/ringbuf_store_params.h | 5 +++-- .../programs/attached/dispatchers/syscall_exit.bpf.c | 10 ++++++++++ .../tail_called/events/custom_logic/hotplug.bpf.c | 2 +- 4 files changed, 17 insertions(+), 5 deletions(-) diff --git a/driver/modern_bpf/helpers/store/auxmap_store_params.h b/driver/modern_bpf/helpers/store/auxmap_store_params.h index 5887b63d04..7f5709a3fd 100644 --- a/driver/modern_bpf/helpers/store/auxmap_store_params.h +++ b/driver/modern_bpf/helpers/store/auxmap_store_params.h @@ -119,11 +119,12 @@ static __always_inline void auxmap__finalize_event_header(struct auxiliary_map * * @param auxmap pointer to the auxmap in which we have already written the entire event. * @param ctx BPF prog context */ +// todo!: we need to remove the context because we don't perform any tail call static __always_inline void auxmap__submit_event(struct auxiliary_map *auxmap, void *ctx) { struct ringbuf_map *rb = maps__get_ringbuf_map(); if(!rb) { - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_HOTPLUG_E); - bpf_printk("failed to tail call into the 'hotplug' prog"); + // this should never happen because we check it in sys_enter/sys_exit + bpf_printk("FAILURE: unable to obtain the ring buffer"); return; } diff --git a/driver/modern_bpf/helpers/store/ringbuf_store_params.h b/driver/modern_bpf/helpers/store/ringbuf_store_params.h index 0dee9f1346..1d7708bf6c 100644 --- a/driver/modern_bpf/helpers/store/ringbuf_store_params.h +++ b/driver/modern_bpf/helpers/store/ringbuf_store_params.h @@ -94,14 +94,15 @@ struct ringbuf_struct { * @param event_size exact size of the fixed-size event * @return `1` in case of success, `0` in case of failure. */ +// todo!: we need to remove the context because we don't perform any tail call static __always_inline uint32_t ringbuf__reserve_space(struct ringbuf_struct *ringbuf, void *ctx, uint32_t event_size, uint16_t event_type) { struct ringbuf_map *rb = maps__get_ringbuf_map(); if(!rb) { - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_HOTPLUG_E); - bpf_printk("failed to tail call into the 'hotplug' prog"); + // this should never happen because we check it in sys_enter/sys_exit + bpf_printk("FAILURE: unable to obtain the ring buffer"); return 0; } diff --git a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c index 53714500a0..732cb31b32 100644 --- a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c +++ b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c @@ -71,6 +71,16 @@ int BPF_PROG(sys_exit, struct pt_regs *regs, long ret) { return 0; } + // If we cannot find a ring buffer for this CPU we probably have an hotplug event. It's ok to + // check only in the exit path since we will always have at least one exit syscall enabled. If + // we change our architecture we may need to update this logic. + struct ringbuf_map *rb = maps__get_ringbuf_map(); + if(!rb) { + bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_HOTPLUG_E); + bpf_printk("failed to tail call into the 'hotplug' prog"); + return 0; + } + bpf_tail_call(ctx, &syscall_exit_tail_table, syscall_id); return 0; diff --git a/driver/modern_bpf/programs/tail_called/events/custom_logic/hotplug.bpf.c b/driver/modern_bpf/programs/tail_called/events/custom_logic/hotplug.bpf.c index 256fddfa0f..ce969ed8e3 100644 --- a/driver/modern_bpf/programs/tail_called/events/custom_logic/hotplug.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/custom_logic/hotplug.bpf.c @@ -8,7 +8,7 @@ #include -SEC("tp_btf/sys_enter") +SEC("tp_btf/sys_exit") int BPF_PROG(t1_hotplug_e) { /* We assume that the ring buffer for CPU 0 is always there so we send the * HOT-PLUG event through this buffer. From dabbaf729979c16652731e2e79a949c6568b00dd Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 17:10:56 +0100 Subject: [PATCH 05/45] cleanup: simplify droppping logic for tracepoint Signed-off-by: Andrea Terzolo --- driver/modern_bpf/helpers/base/maps_getters.h | 5 -- .../helpers/interfaces/attached_programs.h | 19 +---- driver/modern_bpf/maps/maps.h | 9 -- .../attached/dispatchers/syscall_enter.bpf.c | 2 +- .../attached/dispatchers/syscall_exit.bpf.c | 2 +- .../attached/events/page_fault_kernel.bpf.c | 3 +- .../attached/events/page_fault_user.bpf.c | 3 +- .../attached/events/sched_switch.bpf.c | 82 ++++++++++++++++++- .../attached/events/signal_deliver.bpf.c | 3 +- userspace/libpman/src/maps.c | 10 --- 10 files changed, 91 insertions(+), 47 deletions(-) diff --git a/driver/modern_bpf/helpers/base/maps_getters.h b/driver/modern_bpf/helpers/base/maps_getters.h index 2dc3477a5e..a71f7108fc 100644 --- a/driver/modern_bpf/helpers/base/maps_getters.h +++ b/driver/modern_bpf/helpers/base/maps_getters.h @@ -85,11 +85,6 @@ static __always_inline uint8_t maps__64bit_sampling_syscall_table(uint32_t sysca return g_64bit_sampling_syscall_table[syscall_id & (SYSCALL_TABLE_SIZE - 1)]; } -static __always_inline uint8_t maps__64bit_sampling_tracepoint_table(uint32_t event_id) { - return g_64bit_sampling_tracepoint_table[event_id < PPM_EVENT_MAX ? event_id - : PPM_EVENT_MAX - 1]; -} - /*=============================== SAMPLING TABLES ===========================*/ /*=============================== SYSCALL-64 INTERESTING TABLE ===========================*/ diff --git a/driver/modern_bpf/helpers/interfaces/attached_programs.h b/driver/modern_bpf/helpers/interfaces/attached_programs.h index cde3053481..488bfa3caa 100644 --- a/driver/modern_bpf/helpers/interfaces/attached_programs.h +++ b/driver/modern_bpf/helpers/interfaces/attached_programs.h @@ -10,17 +10,11 @@ #include -/* This enum is used to tell if we are considering a syscall or a tracepoint */ -enum intrumentation_type { - MODERN_BPF_SYSCALL = 0, - MODERN_BPF_TRACEPOINT = 1, -}; - /* The sampling logic is used by all BPF programs attached to the kernel. * We treat the syscalls tracepoints in a dedicated way because they could generate * more than one event (1 for each syscall) for this reason we need a dedicated table. */ -static __always_inline bool sampling_logic(void* ctx, uint32_t id, enum intrumentation_type type) { +static __always_inline bool sampling_logic(void* ctx, uint32_t id) { /* If dropping mode is not enabled we don't perform any sampling * false: means don't drop the syscall * true: means drop the syscall @@ -29,16 +23,7 @@ static __always_inline bool sampling_logic(void* ctx, uint32_t id, enum intrumen return false; } - uint8_t sampling_flag = 0; - - /* If we have a syscall we use the sampling_syscall_table otherwise - * with tracepoints we use the sampling_tracepoint_table. - */ - if(type == MODERN_BPF_SYSCALL) { - sampling_flag = maps__64bit_sampling_syscall_table(id); - } else { - sampling_flag = maps__64bit_sampling_tracepoint_table(id); - } + uint8_t sampling_flag = maps__64bit_sampling_syscall_table(id); if(sampling_flag == UF_NEVER_DROP) { return false; diff --git a/driver/modern_bpf/maps/maps.h b/driver/modern_bpf/maps/maps.h index ecd77f04d9..c2ecfe22ff 100644 --- a/driver/modern_bpf/maps/maps.h +++ b/driver/modern_bpf/maps/maps.h @@ -65,15 +65,6 @@ __weak bool g_64bit_interesting_syscalls_table[SYSCALL_TABLE_SIZE]; */ __weak uint8_t g_64bit_sampling_syscall_table[SYSCALL_TABLE_SIZE]; -/** - * @brief Given the tracepoint enum returns: - * - `UF_NEVER_DROP` if the syscall must not be dropped in the sampling logic. - * - `UF_ALWAYS_DROP` if the syscall must always be dropped in the sampling logic. - * - `UF_NONE` if we drop the syscall depends on the sampling ratio. - */ -/// TOOD: we need to change the dimension! we need to create a dedicated enum for tracepoints! -__weak uint8_t g_64bit_sampling_tracepoint_table[PPM_EVENT_MAX]; - /** * @brief Given the syscall id on 32-bit x86 arch returns * its x64 value. Used to support ia32 syscall emulation. diff --git a/driver/modern_bpf/programs/attached/dispatchers/syscall_enter.bpf.c b/driver/modern_bpf/programs/attached/dispatchers/syscall_enter.bpf.c index 7732b738e2..0bc17f1702 100644 --- a/driver/modern_bpf/programs/attached/dispatchers/syscall_enter.bpf.c +++ b/driver/modern_bpf/programs/attached/dispatchers/syscall_enter.bpf.c @@ -49,7 +49,7 @@ int BPF_PROG(sys_enter, struct pt_regs *regs, long syscall_id) { return 0; } - if(sampling_logic(ctx, syscall_id, MODERN_BPF_SYSCALL)) { + if(sampling_logic(ctx, syscall_id)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c index 732cb31b32..cbe1fc33e9 100644 --- a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c +++ b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c @@ -63,7 +63,7 @@ int BPF_PROG(sys_exit, struct pt_regs *regs, long ret) { return 0; } - if(sampling_logic(ctx, syscall_id, MODERN_BPF_SYSCALL)) { + if(sampling_logic(ctx, syscall_id)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c b/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c index f9576a93da..4e5818f89c 100644 --- a/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c +++ b/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c @@ -16,7 +16,8 @@ #ifdef CAPTURE_PAGE_FAULTS SEC("tp_btf/page_fault_kernel") int BPF_PROG(pf_kernel, unsigned long address, struct pt_regs *regs, unsigned long error_code) { - if(sampling_logic(ctx, PPME_PAGE_FAULT_E, MODERN_BPF_TRACEPOINT)) { + // In case of dropping mode we don't want this kind of events. + if(maps__get_dropping_mode()) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c b/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c index c6179c3aea..5178ffa83f 100644 --- a/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c +++ b/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c @@ -16,7 +16,8 @@ #ifdef CAPTURE_PAGE_FAULTS SEC("tp_btf/page_fault_user") int BPF_PROG(pf_user, unsigned long address, struct pt_regs *regs, unsigned long error_code) { - if(sampling_logic(ctx, PPME_PAGE_FAULT_E, MODERN_BPF_TRACEPOINT)) { + // In case of dropping mode we don't want this kind of events. + if(maps__get_dropping_mode()) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c index d639edbd7c..60d84820b8 100644 --- a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c @@ -9,13 +9,93 @@ #include #include +SEC("tp_btf/sched_switch") +int BPF_PROG(t1_drop_sched_switch_e) { + struct ringbuf_struct ringbuf; + if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_E_SIZE, PPME_DROP_E)) { + return 0; + } + + ringbuf__store_event_header(&ringbuf); + + /*=============================== COLLECT PARAMETERS ===========================*/ + + ringbuf__store_u32(&ringbuf, maps__get_sampling_ratio()); + + /*=============================== COLLECT PARAMETERS ===========================*/ + + ringbuf__submit_event(&ringbuf); + return 0; +} + +SEC("tp_btf/sched_switch") +int BPF_PROG(t1_drop_sched_switch_x) { + struct ringbuf_struct ringbuf; + if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_X_SIZE, PPME_DROP_X)) { + return 0; + } + + ringbuf__store_event_header(&ringbuf); + + /*=============================== COLLECT PARAMETERS ===========================*/ + + ringbuf__store_u32(&ringbuf, maps__get_sampling_ratio()); + + /*=============================== COLLECT PARAMETERS ===========================*/ + + ringbuf__submit_event(&ringbuf); + return 0; +} + +enum extra_sched_proc_exec_codes { + SCHED_SWITCH_DROP_E, + SCHED_SWITCH_DROP_X, +}; + +struct { + __uint(type, BPF_MAP_TYPE_PROG_ARRAY); + __uint(max_entries, 2); + __uint(key_size, sizeof(__u32)); + __array(values, int(void *)); +} sched_switch_drop_calls SEC(".maps") = { + .values = + { + [SCHED_SWITCH_DROP_E] = (void *)&t1_drop_sched_switch_e, + [SCHED_SWITCH_DROP_X] = (void *)&t1_drop_sched_switch_x, + }, +}; + +// todo!: probably we can remove all this logic in the future and just adapt SCHED_SWITCH to +// other tracepoints like signal_deliver +static __always_inline bool sched_switch_sampling_logic(void *ctx) { + if(!maps__get_dropping_mode()) { + return false; + } + + if((bpf_ktime_get_boot_ns() % SECOND_TO_NS) >= (SECOND_TO_NS / maps__get_sampling_ratio())) { + if(!maps__get_is_dropping()) { + maps__set_is_dropping(true); + bpf_tail_call(ctx, &sched_switch_drop_calls, SCHED_SWITCH_DROP_E); + bpf_printk("unable to tail call into 'sched_switch_drop_e' prog"); + } + return true; + } + + if(maps__get_is_dropping()) { + maps__set_is_dropping(false); + bpf_tail_call(ctx, &sched_switch_drop_calls, SCHED_SWITCH_DROP_X); + bpf_printk("unable to tail call into 'sched_switch_drop_x' prog"); + } + return false; +} + /* From linux tree: /include/linux/events/sched.h * TP_PROTO(bool preempt, struct task_struct *prev, * struct task_struct *next) */ SEC("tp_btf/sched_switch") int BPF_PROG(sched_switch, bool preempt, struct task_struct *prev, struct task_struct *next) { - if(sampling_logic(ctx, PPME_SCHEDSWITCH_6_E, MODERN_BPF_TRACEPOINT)) { + if(sched_switch_sampling_logic(ctx)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c b/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c index 4b455eca05..9ff90d6528 100644 --- a/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c +++ b/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c @@ -14,7 +14,8 @@ */ SEC("tp_btf/signal_deliver") int BPF_PROG(signal_deliver, int sig, struct kernel_siginfo *info, struct k_sigaction *ka) { - if(sampling_logic(ctx, PPME_SIGNALDELIVER_E, MODERN_BPF_TRACEPOINT)) { + // In case of dropping mode we don't want this kind of events. + if(maps__get_dropping_mode()) { return 0; } diff --git a/userspace/libpman/src/maps.c b/userspace/libpman/src/maps.c index 0229119747..58478d29b3 100644 --- a/userspace/libpman/src/maps.c +++ b/userspace/libpman/src/maps.c @@ -120,15 +120,6 @@ void pman_fill_syscall_sampling_table() { } } -void pman_fill_syscall_tracepoint_table() { - /* Right now these are the only 2 tracepoints involved in the dropping logic. We need to add - * them here */ - g_state.skel->bss->g_64bit_sampling_tracepoint_table[PPME_PROCEXIT_1_E] = UF_NEVER_DROP; - g_state.skel->bss->g_64bit_sampling_tracepoint_table[PPME_SCHEDSWITCH_6_E] = 0; - g_state.skel->bss->g_64bit_sampling_tracepoint_table[PPME_PAGE_FAULT_E] = UF_ALWAYS_DROP; - g_state.skel->bss->g_64bit_sampling_tracepoint_table[PPME_SIGNALDELIVER_E] = UF_ALWAYS_DROP; -} - void pman_fill_ia32_to_64_table() { for(int syscall_id = 0; syscall_id < SYSCALL_TABLE_SIZE; syscall_id++) { // Note: we will map all syscalls from the upper limit of the ia32 table @@ -339,7 +330,6 @@ int pman_finalize_maps_after_loading() { /* We have to fill all ours tail tables. */ pman_fill_syscall_sampling_table(); - pman_fill_syscall_tracepoint_table(); pman_fill_ia32_to_64_table(); err = pman_fill_syscalls_tail_table(); err = err ?: pman_fill_extra_event_prog_tail_table(); From 70033a45a5e2bccd324545465e7ecd9eca23adea Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 17:15:26 +0100 Subject: [PATCH 06/45] update: set sched_switch as UF_ALWAYS_DROP Signed-off-by: Andrea Terzolo --- driver/bpf/probe.c | 2 +- driver/main.c | 2 +- .../attached/events/sched_switch.bpf.c | 83 +------------------ 3 files changed, 4 insertions(+), 83 deletions(-) diff --git a/driver/bpf/probe.c b/driver/bpf/probe.c index 66d6fd1487..1cd98b42ba 100644 --- a/driver/bpf/probe.c +++ b/driver/bpf/probe.c @@ -254,7 +254,7 @@ BPF_PROBE("sched/", sched_switch, sched_switch_args) { evt_type = PPME_SCHEDSWITCH_6_E; - call_filler(ctx, ctx, evt_type, 0, -1); + call_filler(ctx, ctx, evt_type, UF_ALWAYS_DROP, -1); return 0; } diff --git a/driver/main.c b/driver/main.c index 9d4cea6381..93e33f5951 100644 --- a/driver/main.c +++ b/driver/main.c @@ -2393,7 +2393,7 @@ TRACEPOINT_PROBE(sched_switch_probe, * handler calling printk() and potentially deadlocking the system. */ record_event_all_consumers(PPME_SCHEDSWITCH_6_E, - UF_USED | UF_ATOMIC, + UF_ALWAYS_DROP | UF_ATOMIC, &event_data, KMOD_PROG_SCHED_SWITCH); } diff --git a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c index 60d84820b8..122a64f9d1 100644 --- a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c @@ -9,93 +9,14 @@ #include #include -SEC("tp_btf/sched_switch") -int BPF_PROG(t1_drop_sched_switch_e) { - struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_E_SIZE, PPME_DROP_E)) { - return 0; - } - - ringbuf__store_event_header(&ringbuf); - - /*=============================== COLLECT PARAMETERS ===========================*/ - - ringbuf__store_u32(&ringbuf, maps__get_sampling_ratio()); - - /*=============================== COLLECT PARAMETERS ===========================*/ - - ringbuf__submit_event(&ringbuf); - return 0; -} - -SEC("tp_btf/sched_switch") -int BPF_PROG(t1_drop_sched_switch_x) { - struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_X_SIZE, PPME_DROP_X)) { - return 0; - } - - ringbuf__store_event_header(&ringbuf); - - /*=============================== COLLECT PARAMETERS ===========================*/ - - ringbuf__store_u32(&ringbuf, maps__get_sampling_ratio()); - - /*=============================== COLLECT PARAMETERS ===========================*/ - - ringbuf__submit_event(&ringbuf); - return 0; -} - -enum extra_sched_proc_exec_codes { - SCHED_SWITCH_DROP_E, - SCHED_SWITCH_DROP_X, -}; - -struct { - __uint(type, BPF_MAP_TYPE_PROG_ARRAY); - __uint(max_entries, 2); - __uint(key_size, sizeof(__u32)); - __array(values, int(void *)); -} sched_switch_drop_calls SEC(".maps") = { - .values = - { - [SCHED_SWITCH_DROP_E] = (void *)&t1_drop_sched_switch_e, - [SCHED_SWITCH_DROP_X] = (void *)&t1_drop_sched_switch_x, - }, -}; - -// todo!: probably we can remove all this logic in the future and just adapt SCHED_SWITCH to -// other tracepoints like signal_deliver -static __always_inline bool sched_switch_sampling_logic(void *ctx) { - if(!maps__get_dropping_mode()) { - return false; - } - - if((bpf_ktime_get_boot_ns() % SECOND_TO_NS) >= (SECOND_TO_NS / maps__get_sampling_ratio())) { - if(!maps__get_is_dropping()) { - maps__set_is_dropping(true); - bpf_tail_call(ctx, &sched_switch_drop_calls, SCHED_SWITCH_DROP_E); - bpf_printk("unable to tail call into 'sched_switch_drop_e' prog"); - } - return true; - } - - if(maps__get_is_dropping()) { - maps__set_is_dropping(false); - bpf_tail_call(ctx, &sched_switch_drop_calls, SCHED_SWITCH_DROP_X); - bpf_printk("unable to tail call into 'sched_switch_drop_x' prog"); - } - return false; -} - /* From linux tree: /include/linux/events/sched.h * TP_PROTO(bool preempt, struct task_struct *prev, * struct task_struct *next) */ SEC("tp_btf/sched_switch") int BPF_PROG(sched_switch, bool preempt, struct task_struct *prev, struct task_struct *next) { - if(sched_switch_sampling_logic(ctx)) { + // In case of dropping mode we don't want this kind of events. + if(maps__get_dropping_mode()) { return 0; } From cc7c36c69c9300da40491bf39c24beb343281fb0 Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 17:39:49 +0100 Subject: [PATCH 07/45] cleanup: rename some methods Signed-off-by: Andrea Terzolo --- .../helpers/interfaces/attached_programs.h | 4 ++-- driver/modern_bpf/maps/maps.h | 4 ++-- .../attached/dispatchers/syscall_exit.bpf.c | 2 +- .../events/syscall_dispatched_events/clone.bpf.c | 4 ++-- .../events/syscall_dispatched_events/clone3.bpf.c | 4 ++-- .../events/syscall_dispatched_events/execve.bpf.c | 4 ++-- .../events/syscall_dispatched_events/execveat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fork.bpf.c | 4 ++-- .../open_by_handle_at.bpf.c | 2 +- .../events/syscall_dispatched_events/vfork.bpf.c | 4 ++-- driver/ppm_events_public.h | 3 +-- userspace/libpman/include/libpman.h | 8 ++++---- userspace/libpman/src/maps.c | 13 ++++++------- 13 files changed, 29 insertions(+), 31 deletions(-) diff --git a/driver/modern_bpf/helpers/interfaces/attached_programs.h b/driver/modern_bpf/helpers/interfaces/attached_programs.h index 488bfa3caa..77299e1c03 100644 --- a/driver/modern_bpf/helpers/interfaces/attached_programs.h +++ b/driver/modern_bpf/helpers/interfaces/attached_programs.h @@ -44,7 +44,7 @@ static __always_inline bool sampling_logic(void* ctx, uint32_t id) { * an iteration we will synchronize again the next time the logic is enabled. */ maps__set_is_dropping(true); - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_DROP_E); + bpf_tail_call(ctx, &extra_syscall_calls, T1_DROP_E); bpf_printk("unable to tail call into 'drop_e' prog"); } return true; @@ -52,7 +52,7 @@ static __always_inline bool sampling_logic(void* ctx, uint32_t id) { if(maps__get_is_dropping()) { maps__set_is_dropping(false); - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_DROP_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_DROP_X); bpf_printk("unable to tail call into 'drop_x' prog"); } diff --git a/driver/modern_bpf/maps/maps.h b/driver/modern_bpf/maps/maps.h index c2ecfe22ff..59cdb3dd54 100644 --- a/driver/modern_bpf/maps/maps.h +++ b/driver/modern_bpf/maps/maps.h @@ -122,7 +122,7 @@ struct { * programs directly attached in the kernel (like page_faults, * context_switch, ...) and by syscall_events (like * ppme_syscall_execveat_x, ...). - * Given a predefined tail-code (`extra_event_prog_code`), it calls + * Given a predefined tail-code (`extra_syscall_codes`), it calls * the right bpf program. */ struct { @@ -130,7 +130,7 @@ struct { __uint(max_entries, TAIL_EXTRA_EVENT_PROG_MAX); __type(key, uint32_t); __type(value, uint32_t); -} extra_event_prog_tail_table __weak SEC(".maps"); +} extra_syscall_calls __weak SEC(".maps"); /*=============================== BPF_MAP_TYPE_PROG_ARRAY ===============================*/ diff --git a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c index cbe1fc33e9..9355466f7e 100644 --- a/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c +++ b/driver/modern_bpf/programs/attached/dispatchers/syscall_exit.bpf.c @@ -76,7 +76,7 @@ int BPF_PROG(sys_exit, struct pt_regs *regs, long ret) { // we change our architecture we may need to update this logic. struct ringbuf_map *rb = maps__get_ringbuf_map(); if(!rb) { - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_HOTPLUG_E); + bpf_tail_call(ctx, &extra_syscall_calls, T1_HOTPLUG_E); bpf_printk("failed to tail call into the 'hotplug' prog"); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c index 682566b755..91a6ae9355 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c @@ -150,7 +150,7 @@ int BPF_PROG(clone_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_CLONE_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_CLONE_X); return 0; } @@ -206,7 +206,7 @@ int BPF_PROG(t1_clone_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_CLONE_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_CLONE_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c index c87ffec713..b74a354d44 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c @@ -150,7 +150,7 @@ int BPF_PROG(clone3_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_CLONE3_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_CLONE3_X); return 0; } @@ -204,7 +204,7 @@ int BPF_PROG(t1_clone3_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_CLONE3_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_CLONE3_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c index dbbd9390b8..0906d32e5c 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c @@ -155,7 +155,7 @@ int BPF_PROG(execve_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_EXECVE_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_EXECVE_X); return 0; } @@ -284,7 +284,7 @@ int BPF_PROG(t1_execve_x, struct pt_regs *regs, long ret) { /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_EXECVE_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_EXECVE_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c index 38174f9628..86ccf2ba51 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c @@ -168,7 +168,7 @@ int BPF_PROG(execveat_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_EXECVEAT_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_EXECVEAT_X); return 0; } @@ -296,7 +296,7 @@ int BPF_PROG(t1_execveat_x, struct pt_regs *regs, long ret) { /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_EXECVEAT_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_EXECVEAT_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c index 87d870fb08..2a1241def0 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c @@ -152,7 +152,7 @@ int BPF_PROG(fork_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_FORK_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_FORK_X); return 0; } @@ -198,7 +198,7 @@ int BPF_PROG(t1_fork_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_FORK_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_FORK_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c index da09ec6e1b..45c21c3896 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c @@ -61,7 +61,7 @@ int BPF_PROG(open_by_handle_at_x, struct pt_regs *regs, long ret) { /*=============================== COLLECT PARAMETERS ===========================*/ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_OPEN_BY_HANDLE_AT_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_OPEN_BY_HANDLE_AT_X); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c index 544d5ebffd..d6201142eb 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c @@ -150,7 +150,7 @@ int BPF_PROG(vfork_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T1_VFORK_X); + bpf_tail_call(ctx, &extra_syscall_calls, T1_VFORK_X); return 0; } @@ -196,7 +196,7 @@ int BPF_PROG(t1_vfork_x, struct pt_regs *regs, long ret) { /* We have to split here the bpf program, otherwise, it is too large * for the verifier (limit 1000000 instructions). */ - bpf_tail_call(ctx, &extra_event_prog_tail_table, T2_VFORK_X); + bpf_tail_call(ctx, &extra_syscall_calls, T2_VFORK_X); return 0; } diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h index e85e566f5b..06e5255ab8 100644 --- a/driver/ppm_events_public.h +++ b/driver/ppm_events_public.h @@ -1525,8 +1525,7 @@ typedef enum { * - `X` = means that we need this extra tail call for the exit event, `E` means enter the event. * */ -// todo!: rename this `extra_syscall_exit_calls`. -enum extra_event_prog_code { +enum extra_syscall_codes { T1_EXECVE_X = 0, T1_EXECVEAT_X = 1, T1_CLONE_X = 2, diff --git a/userspace/libpman/include/libpman.h b/userspace/libpman/include/libpman.h index 00c9f8212f..b916bb6164 100644 --- a/userspace/libpman/include/libpman.h +++ b/userspace/libpman/include/libpman.h @@ -398,17 +398,17 @@ uint64_t pman_get_probe_schema_ver(void); /** * @brief Some bpf programs exceed the maximum complexity * so they have to tail-call other programs. To do that, they - * need a particular tail table that we call `extra_event_prog_tail_table`. + * need a particular tail table that we call `extra_syscall_calls`. * * -> EXTRA EVENT PROG TAIL TABLE - * extra_event_prog_tail_table(extra_event_prog_code, program_fd). + * extra_syscall_calls(extra_syscall_codes, program_fd). * - * `extra_event_prog_code` is an enum defined in + * `extra_syscall_codes` is an enum defined in * `/driver/ppm_events_public.h` * * @return `0` on success, `errno` in case of error. */ -int pman_fill_extra_event_prog_tail_table(void); +int pman_fill_extra_syscall_calls_table(void); /** * @brief The syscall dispatchers will look into these tables diff --git a/userspace/libpman/src/maps.c b/userspace/libpman/src/maps.c index 58478d29b3..d3c15529e6 100644 --- a/userspace/libpman/src/maps.c +++ b/userspace/libpman/src/maps.c @@ -249,12 +249,11 @@ int pman_fill_syscalls_tail_table() { return errno; } -int pman_fill_extra_event_prog_tail_table() { - int extra_event_prog_tail_table_fd = 0; +int pman_fill_extra_syscall_calls_table() { + int extra_syscall_call_table_fd = bpf_map__fd(g_state.skel->maps.extra_syscall_calls); const char* tail_prog_name; - extra_event_prog_tail_table_fd = bpf_map__fd(g_state.skel->maps.extra_event_prog_tail_table); - if(extra_event_prog_tail_table_fd <= 0) { + if(extra_syscall_call_table_fd <= 0) { pman_print_error("unable to get the extra event programs tail table"); return errno; } @@ -266,8 +265,8 @@ int pman_fill_extra_event_prog_tail_table() { continue; } - if(add_bpf_program_to_tail_table(extra_event_prog_tail_table_fd, tail_prog_name, j)) { - close(extra_event_prog_tail_table_fd); + if(add_bpf_program_to_tail_table(extra_syscall_call_table_fd, tail_prog_name, j)) { + close(extra_syscall_call_table_fd); return errno; } } @@ -332,6 +331,6 @@ int pman_finalize_maps_after_loading() { pman_fill_syscall_sampling_table(); pman_fill_ia32_to_64_table(); err = pman_fill_syscalls_tail_table(); - err = err ?: pman_fill_extra_event_prog_tail_table(); + err = err ?: pman_fill_extra_syscall_calls_table(); return err; } From 38cceec08650681e82d9473e132cd38bcc98c99c Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 18:04:46 +0100 Subject: [PATCH 08/45] cleanup: don't initialize enums if not needed Signed-off-by: Andrea Terzolo --- driver/ppm_events_public.h | 35 ++++++++++++++++++----------------- userspace/libpman/src/maps.c | 6 +++--- 2 files changed, 21 insertions(+), 20 deletions(-) diff --git a/driver/ppm_events_public.h b/driver/ppm_events_public.h index 06e5255ab8..2a6d9fca43 100644 --- a/driver/ppm_events_public.h +++ b/driver/ppm_events_public.h @@ -1526,23 +1526,24 @@ typedef enum { * */ enum extra_syscall_codes { - T1_EXECVE_X = 0, - T1_EXECVEAT_X = 1, - T1_CLONE_X = 2, - T1_CLONE3_X = 3, - T1_FORK_X = 4, - T1_VFORK_X = 5, - T2_CLONE_X = 9, - T2_CLONE3_X = 10, - T2_FORK_X = 11, - T2_VFORK_X = 12, - T1_DROP_E = 13, - T1_DROP_X = 14, - T1_HOTPLUG_E = 15, - T1_OPEN_BY_HANDLE_AT_X = 16, - T2_EXECVE_X = 17, - T2_EXECVEAT_X = 18, - TAIL_EXTRA_EVENT_PROG_MAX = 20 + T1_EXECVE_X, + T1_EXECVEAT_X, + T1_CLONE_X, + T1_CLONE3_X, + T1_FORK_X, + T1_VFORK_X, + T2_CLONE_X, + T2_CLONE3_X, + T2_FORK_X, + T2_VFORK_X, + T1_DROP_E, + T1_DROP_X, + T1_HOTPLUG_E, + T1_OPEN_BY_HANDLE_AT_X, + T2_EXECVE_X, + T2_EXECVEAT_X, + // Add new codes here... + TAIL_EXTRA_EVENT_PROG_MAX, }; /* diff --git a/userspace/libpman/src/maps.c b/userspace/libpman/src/maps.c index d3c15529e6..759e43cd8d 100644 --- a/userspace/libpman/src/maps.c +++ b/userspace/libpman/src/maps.c @@ -251,18 +251,18 @@ int pman_fill_syscalls_tail_table() { int pman_fill_extra_syscall_calls_table() { int extra_syscall_call_table_fd = bpf_map__fd(g_state.skel->maps.extra_syscall_calls); - const char* tail_prog_name; - if(extra_syscall_call_table_fd <= 0) { pman_print_error("unable to get the extra event programs tail table"); return errno; } + const char* tail_prog_name = NULL; for(int j = 0; j < TAIL_EXTRA_EVENT_PROG_MAX; j++) { tail_prog_name = extra_event_prog_names[j]; if(!tail_prog_name) { - continue; + pman_print_error("unknown entry in the extra event programs tail table"); + return -1; } if(add_bpf_program_to_tail_table(extra_syscall_call_table_fd, tail_prog_name, j)) { From 27e12c9c957c3014153d0c12d38947e319ca21fe Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 6 Nov 2024 18:11:38 +0100 Subject: [PATCH 09/45] cleanup: remove `ctx` Signed-off-by: Andrea Terzolo --- driver/modern_bpf/helpers/store/auxmap_store_params.h | 4 +--- driver/modern_bpf/helpers/store/ringbuf_store_params.h | 3 --- .../programs/attached/events/page_fault_kernel.bpf.c | 2 +- .../programs/attached/events/page_fault_user.bpf.c | 2 +- .../programs/attached/events/sched_process_exec.bpf.c | 2 +- .../programs/attached/events/sched_process_exit.bpf.c | 2 +- .../programs/attached/events/sched_process_fork.bpf.c | 2 +- .../programs/attached/events/sched_switch.bpf.c | 2 +- .../programs/attached/events/signal_deliver.bpf.c | 2 +- .../tail_called/events/custom_logic/drop.bpf.c | 4 ++-- .../events/syscall_dispatched_events/accept.bpf.c | 4 ++-- .../events/syscall_dispatched_events/accept4.bpf.c | 4 ++-- .../events/syscall_dispatched_events/access.bpf.c | 4 ++-- .../events/syscall_dispatched_events/bind.bpf.c | 4 ++-- .../events/syscall_dispatched_events/bpf.bpf.c | 4 ++-- .../events/syscall_dispatched_events/brk.bpf.c | 4 ++-- .../events/syscall_dispatched_events/capset.bpf.c | 4 ++-- .../events/syscall_dispatched_events/chdir.bpf.c | 4 ++-- .../events/syscall_dispatched_events/chmod.bpf.c | 4 ++-- .../events/syscall_dispatched_events/chown.bpf.c | 4 ++-- .../events/syscall_dispatched_events/chroot.bpf.c | 4 ++-- .../events/syscall_dispatched_events/clone.bpf.c | 4 ++-- .../events/syscall_dispatched_events/clone3.bpf.c | 4 ++-- .../events/syscall_dispatched_events/close.bpf.c | 4 ++-- .../events/syscall_dispatched_events/connect.bpf.c | 4 ++-- .../syscall_dispatched_events/copy_file_range.bpf.c | 7 ++----- .../events/syscall_dispatched_events/creat.bpf.c | 4 ++-- .../syscall_dispatched_events/delete_module.bpf.c | 4 ++-- .../events/syscall_dispatched_events/dup.bpf.c | 4 ++-- .../events/syscall_dispatched_events/dup2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/dup3.bpf.c | 4 ++-- .../syscall_dispatched_events/epoll_create.bpf.c | 4 ++-- .../syscall_dispatched_events/epoll_create1.bpf.c | 4 ++-- .../events/syscall_dispatched_events/epoll_wait.bpf.c | 4 ++-- .../events/syscall_dispatched_events/eventfd.bpf.c | 4 ++-- .../events/syscall_dispatched_events/eventfd2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/execve.bpf.c | 4 ++-- .../events/syscall_dispatched_events/execveat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fchdir.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fchmod.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fchmodat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fchown.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fchownat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fcntl.bpf.c | 4 ++-- .../syscall_dispatched_events/finit_module.bpf.c | 4 ++-- .../events/syscall_dispatched_events/flock.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fork.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fsconfig.bpf.c | 4 ++-- .../events/syscall_dispatched_events/fstat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/futex.bpf.c | 4 ++-- .../events/syscall_dispatched_events/generic.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getcwd.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getdents.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getdents64.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getegid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/geteuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getgid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getpeername.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getresgid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getresuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getrlimit.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getsockname.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getsockopt.bpf.c | 4 ++-- .../events/syscall_dispatched_events/getuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/init_module.bpf.c | 4 ++-- .../syscall_dispatched_events/inotify_init.bpf.c | 4 ++-- .../syscall_dispatched_events/inotify_init1.bpf.c | 4 ++-- .../syscall_dispatched_events/io_uring_enter.bpf.c | 10 ++-------- .../syscall_dispatched_events/io_uring_register.bpf.c | 2 -- .../syscall_dispatched_events/io_uring_setup.bpf.c | 10 ++-------- .../events/syscall_dispatched_events/ioctl.bpf.c | 4 ++-- .../events/syscall_dispatched_events/kill.bpf.c | 4 ++-- .../events/syscall_dispatched_events/lchown.bpf.c | 4 ++-- .../events/syscall_dispatched_events/link.bpf.c | 4 ++-- .../events/syscall_dispatched_events/linkat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/listen.bpf.c | 4 ++-- .../events/syscall_dispatched_events/llseek.bpf.c | 4 ++-- .../events/syscall_dispatched_events/lseek.bpf.c | 4 ++-- .../events/syscall_dispatched_events/lstat.bpf.c | 4 ++-- .../syscall_dispatched_events/memfd_create.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mkdir.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mkdirat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mknod.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mknodat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mlock.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mlock2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mlockall.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mmap.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mmap2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mount.bpf.c | 4 ++-- .../events/syscall_dispatched_events/mprotect.bpf.c | 4 ++-- .../events/syscall_dispatched_events/munlock.bpf.c | 4 ++-- .../events/syscall_dispatched_events/munlockall.bpf.c | 4 ++-- .../events/syscall_dispatched_events/munmap.bpf.c | 4 ++-- .../events/syscall_dispatched_events/nanosleep.bpf.c | 4 ++-- .../events/syscall_dispatched_events/newfstatat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/open.bpf.c | 4 ++-- .../syscall_dispatched_events/open_by_handle_at.bpf.c | 3 +-- .../events/syscall_dispatched_events/openat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/openat2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pidfd_getfd.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pidfd_open.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pipe.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pipe2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/poll.bpf.c | 4 ++-- .../events/syscall_dispatched_events/ppoll.bpf.c | 4 ++-- .../events/syscall_dispatched_events/prctl.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pread64.bpf.c | 4 ++-- .../events/syscall_dispatched_events/preadv.bpf.c | 4 ++-- .../events/syscall_dispatched_events/prlimit64.bpf.c | 4 ++-- .../syscall_dispatched_events/process_vm_readv.bpf.c | 3 +-- .../syscall_dispatched_events/process_vm_writev.bpf.c | 3 +-- .../events/syscall_dispatched_events/ptrace.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pwrite64.bpf.c | 4 ++-- .../events/syscall_dispatched_events/pwritev.bpf.c | 4 ++-- .../events/syscall_dispatched_events/quotactl.bpf.c | 4 ++-- .../events/syscall_dispatched_events/read.bpf.c | 4 ++-- .../events/syscall_dispatched_events/readv.bpf.c | 4 ++-- .../events/syscall_dispatched_events/recv.bpf.c | 4 ++-- .../events/syscall_dispatched_events/recvfrom.bpf.c | 4 ++-- .../events/syscall_dispatched_events/recvmmsg.bpf.c | 4 ++-- .../events/syscall_dispatched_events/recvmsg.bpf.c | 4 ++-- .../events/syscall_dispatched_events/rename.bpf.c | 4 ++-- .../events/syscall_dispatched_events/renameat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/renameat2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/rmdir.bpf.c | 4 ++-- .../events/syscall_dispatched_events/seccomp.bpf.c | 4 ++-- .../events/syscall_dispatched_events/select.bpf.c | 4 ++-- .../events/syscall_dispatched_events/semctl.bpf.c | 4 ++-- .../events/syscall_dispatched_events/semget.bpf.c | 4 ++-- .../events/syscall_dispatched_events/semop.bpf.c | 4 ++-- .../events/syscall_dispatched_events/send.bpf.c | 4 ++-- .../events/syscall_dispatched_events/sendfile.bpf.c | 4 ++-- .../events/syscall_dispatched_events/sendmmsg.bpf.c | 4 ++-- .../events/syscall_dispatched_events/sendmsg.bpf.c | 4 ++-- .../events/syscall_dispatched_events/sendto.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setgid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setns.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setpgid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setregid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setresgid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setresuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setreuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setrlimit.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setsid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setsockopt.bpf.c | 4 ++-- .../events/syscall_dispatched_events/setuid.bpf.c | 4 ++-- .../events/syscall_dispatched_events/shutdown.bpf.c | 4 ++-- .../events/syscall_dispatched_events/signalfd.bpf.c | 4 ++-- .../events/syscall_dispatched_events/signalfd4.bpf.c | 4 ++-- .../events/syscall_dispatched_events/socket.bpf.c | 4 ++-- .../events/syscall_dispatched_events/socketpair.bpf.c | 4 ++-- .../events/syscall_dispatched_events/splice.bpf.c | 4 ++-- .../events/syscall_dispatched_events/stat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/symlink.bpf.c | 4 ++-- .../events/syscall_dispatched_events/symlinkat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/tgkill.bpf.c | 4 ++-- .../syscall_dispatched_events/timerfd_create.bpf.c | 10 ++-------- .../events/syscall_dispatched_events/tkill.bpf.c | 4 ++-- .../events/syscall_dispatched_events/umount.bpf.c | 4 ++-- .../events/syscall_dispatched_events/umount2.bpf.c | 4 ++-- .../events/syscall_dispatched_events/unlink.bpf.c | 4 ++-- .../events/syscall_dispatched_events/unlinkat.bpf.c | 4 ++-- .../events/syscall_dispatched_events/unshare.bpf.c | 4 ++-- .../events/syscall_dispatched_events/userfaultfd.bpf.c | 4 ++-- .../events/syscall_dispatched_events/vfork.bpf.c | 4 ++-- .../events/syscall_dispatched_events/write.bpf.c | 4 ++-- .../events/syscall_dispatched_events/writev.bpf.c | 4 ++-- 168 files changed, 321 insertions(+), 352 deletions(-) diff --git a/driver/modern_bpf/helpers/store/auxmap_store_params.h b/driver/modern_bpf/helpers/store/auxmap_store_params.h index 7f5709a3fd..0ec580683e 100644 --- a/driver/modern_bpf/helpers/store/auxmap_store_params.h +++ b/driver/modern_bpf/helpers/store/auxmap_store_params.h @@ -117,10 +117,8 @@ static __always_inline void auxmap__finalize_event_header(struct auxiliary_map * * of events sent to userspace, otherwise we increment the dropped events. * * @param auxmap pointer to the auxmap in which we have already written the entire event. - * @param ctx BPF prog context */ -// todo!: we need to remove the context because we don't perform any tail call -static __always_inline void auxmap__submit_event(struct auxiliary_map *auxmap, void *ctx) { +static __always_inline void auxmap__submit_event(struct auxiliary_map *auxmap) { struct ringbuf_map *rb = maps__get_ringbuf_map(); if(!rb) { // this should never happen because we check it in sys_enter/sys_exit diff --git a/driver/modern_bpf/helpers/store/ringbuf_store_params.h b/driver/modern_bpf/helpers/store/ringbuf_store_params.h index 1d7708bf6c..135d2e9dfb 100644 --- a/driver/modern_bpf/helpers/store/ringbuf_store_params.h +++ b/driver/modern_bpf/helpers/store/ringbuf_store_params.h @@ -90,13 +90,10 @@ struct ringbuf_struct { * to know the event dimension at compile time. * * @param ringbuf pointer to the `ringbuf_struct` - * @param ctx BPF prog context * @param event_size exact size of the fixed-size event * @return `1` in case of success, `0` in case of failure. */ -// todo!: we need to remove the context because we don't perform any tail call static __always_inline uint32_t ringbuf__reserve_space(struct ringbuf_struct *ringbuf, - void *ctx, uint32_t event_size, uint16_t event_type) { struct ringbuf_map *rb = maps__get_ringbuf_map(); diff --git a/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c b/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c index 4e5818f89c..3ce886d22a 100644 --- a/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c +++ b/driver/modern_bpf/programs/attached/events/page_fault_kernel.bpf.c @@ -22,7 +22,7 @@ int BPF_PROG(pf_kernel, unsigned long address, struct pt_regs *regs, unsigned lo } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PAGE_FAULT_SIZE, PPME_PAGE_FAULT_E)) { + if(!ringbuf__reserve_space(&ringbuf, PAGE_FAULT_SIZE, PPME_PAGE_FAULT_E)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c b/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c index 5178ffa83f..98a3416142 100644 --- a/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c +++ b/driver/modern_bpf/programs/attached/events/page_fault_user.bpf.c @@ -22,7 +22,7 @@ int BPF_PROG(pf_user, unsigned long address, struct pt_regs *regs, unsigned long } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PAGE_FAULT_SIZE, PPME_PAGE_FAULT_E)) { + if(!ringbuf__reserve_space(&ringbuf, PAGE_FAULT_SIZE, PPME_PAGE_FAULT_E)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c b/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c index 53c678fd0c..8f474209d4 100644 --- a/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_process_exec.bpf.c @@ -292,7 +292,7 @@ int BPF_PROG(t2_sched_p_exec, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/attached/events/sched_process_exit.bpf.c b/driver/modern_bpf/programs/attached/events/sched_process_exit.bpf.c index 9e05b34472..42d6d2f701 100644 --- a/driver/modern_bpf/programs/attached/events/sched_process_exit.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_process_exit.bpf.c @@ -201,7 +201,7 @@ int BPF_PROG(sched_proc_exit, struct task_struct *task) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c b/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c index 059b5a5646..854104df7b 100644 --- a/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_process_fork.bpf.c @@ -255,7 +255,7 @@ int BPF_PROG(t2_sched_p_fork, struct task_struct *parent, struct task_struct *ch auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } #endif /* CAPTURE_SCHED_PROC_EXEC */ diff --git a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c index 122a64f9d1..a273d7d5ff 100644 --- a/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c +++ b/driver/modern_bpf/programs/attached/events/sched_switch.bpf.c @@ -23,7 +23,7 @@ int BPF_PROG(sched_switch, bool preempt, struct task_struct *prev, struct task_s /// TODO: we could avoid switches from kernel threads to kernel threads (?). struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SCHED_SWITCH_SIZE, PPME_SCHEDSWITCH_6_E)) { + if(!ringbuf__reserve_space(&ringbuf, SCHED_SWITCH_SIZE, PPME_SCHEDSWITCH_6_E)) { return 0; } diff --git a/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c b/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c index 9ff90d6528..65c2be8dee 100644 --- a/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c +++ b/driver/modern_bpf/programs/attached/events/signal_deliver.bpf.c @@ -20,7 +20,7 @@ int BPF_PROG(signal_deliver, int sig, struct kernel_siginfo *info, struct k_siga } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SIGNAL_DELIVER_SIZE, PPME_SIGNALDELIVER_E)) { + if(!ringbuf__reserve_space(&ringbuf, SIGNAL_DELIVER_SIZE, PPME_SIGNALDELIVER_E)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/custom_logic/drop.bpf.c b/driver/modern_bpf/programs/tail_called/events/custom_logic/drop.bpf.c index 49f90f9f32..ca725ad1be 100644 --- a/driver/modern_bpf/programs/tail_called/events/custom_logic/drop.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/custom_logic/drop.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(t1_drop_e) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_E_SIZE, PPME_DROP_E)) { + if(!ringbuf__reserve_space(&ringbuf, DROP_E_SIZE, PPME_DROP_E)) { return 0; } @@ -36,7 +36,7 @@ int BPF_PROG(t1_drop_e) { SEC("tp_btf/sys_exit") int BPF_PROG(t1_drop_x) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DROP_X_SIZE, PPME_DROP_X)) { + if(!ringbuf__reserve_space(&ringbuf, DROP_X_SIZE, PPME_DROP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept.bpf.c index 5efa008f14..e51b98855f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(accept_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, ACCEPT_E_SIZE, PPME_SOCKET_ACCEPT_5_E)) { + if(!ringbuf__reserve_space(&ringbuf, ACCEPT_E_SIZE, PPME_SOCKET_ACCEPT_5_E)) { return 0; } @@ -105,7 +105,7 @@ int BPF_PROG(accept_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept4.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept4.bpf.c index 034c015e4b..59f3f20ee3 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept4.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/accept4.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(accept4_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, ACCEPT4_E_SIZE, PPME_SOCKET_ACCEPT4_6_E)) { + if(!ringbuf__reserve_space(&ringbuf, ACCEPT4_E_SIZE, PPME_SOCKET_ACCEPT4_6_E)) { return 0; } @@ -109,7 +109,7 @@ int BPF_PROG(accept4_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/access.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/access.bpf.c index fd71693a0c..d1809e94c2 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/access.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/access.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(access_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, ACCESS_E_SIZE, PPME_SYSCALL_ACCESS_E)) { + if(!ringbuf__reserve_space(&ringbuf, ACCESS_E_SIZE, PPME_SYSCALL_ACCESS_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(access_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bind.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bind.bpf.c index b980be086a..0d106c1eff 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bind.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bind.bpf.c @@ -18,7 +18,7 @@ int BPF_PROG(bind_e, struct pt_regs *regs, long id) { extract__network_args(&socket_fd, 1, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, BIND_E_SIZE, PPME_SOCKET_BIND_E)) { + if(!ringbuf__reserve_space(&ringbuf, BIND_E_SIZE, PPME_SOCKET_BIND_E)) { return 0; } @@ -70,7 +70,7 @@ int BPF_PROG(bind_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bpf.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bpf.bpf.c index d13fe1666f..c74045dcd5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bpf.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/bpf.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(bpf_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, BPF_E_SIZE, PPME_SYSCALL_BPF_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, BPF_E_SIZE, PPME_SYSCALL_BPF_2_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(bpf_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(bpf_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, BPF_X_SIZE, PPME_SYSCALL_BPF_2_X)) { + if(!ringbuf__reserve_space(&ringbuf, BPF_X_SIZE, PPME_SYSCALL_BPF_2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/brk.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/brk.bpf.c index 679594cd2a..c1810418e5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/brk.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/brk.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(brk_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, BRK_E_SIZE, PPME_SYSCALL_BRK_4_E)) { + if(!ringbuf__reserve_space(&ringbuf, BRK_E_SIZE, PPME_SYSCALL_BRK_4_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(brk_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(brk_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, BRK_X_SIZE, PPME_SYSCALL_BRK_4_X)) { + if(!ringbuf__reserve_space(&ringbuf, BRK_X_SIZE, PPME_SYSCALL_BRK_4_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/capset.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/capset.bpf.c index aec9278646..ea2a11f9f9 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/capset.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/capset.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(capset_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CAPSET_E_SIZE, PPME_SYSCALL_CAPSET_E)) { + if(!ringbuf__reserve_space(&ringbuf, CAPSET_E_SIZE, PPME_SYSCALL_CAPSET_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(capset_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(capset_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CAPSET_X_SIZE, PPME_SYSCALL_CAPSET_X)) { + if(!ringbuf__reserve_space(&ringbuf, CAPSET_X_SIZE, PPME_SYSCALL_CAPSET_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chdir.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chdir.bpf.c index c7a0d52b6d..2054b64327 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chdir.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chdir.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(chdir_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CHDIR_E_SIZE, PPME_SYSCALL_CHDIR_E)) { + if(!ringbuf__reserve_space(&ringbuf, CHDIR_E_SIZE, PPME_SYSCALL_CHDIR_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(chdir_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chmod.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chmod.bpf.c index c3fe03887f..dc7c726e0f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chmod.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chmod.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(chmod_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CHMOD_E_SIZE, PPME_SYSCALL_CHMOD_E)) { + if(!ringbuf__reserve_space(&ringbuf, CHMOD_E_SIZE, PPME_SYSCALL_CHMOD_E)) { return 0; } @@ -61,7 +61,7 @@ int BPF_PROG(chmod_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chown.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chown.bpf.c index a8aaa7d06f..9af2bd4e82 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chown.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chown.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(chown_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CHOWN_E_SIZE, PPME_SYSCALL_CHOWN_E)) { + if(!ringbuf__reserve_space(&ringbuf, CHOWN_E_SIZE, PPME_SYSCALL_CHOWN_E)) { return 0; } @@ -65,7 +65,7 @@ int BPF_PROG(chown_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chroot.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chroot.bpf.c index 0a98215e0a..e8c5fbf2c0 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chroot.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/chroot.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(chroot_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CHROOT_E_SIZE, PPME_SYSCALL_CHROOT_E)) { + if(!ringbuf__reserve_space(&ringbuf, CHROOT_E_SIZE, PPME_SYSCALL_CHROOT_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(chroot_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c index 91a6ae9355..c38c3f02c3 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(clone_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CLONE_E_SIZE, PPME_SYSCALL_CLONE_20_E)) { + if(!ringbuf__reserve_space(&ringbuf, CLONE_E_SIZE, PPME_SYSCALL_CLONE_20_E)) { return 0; } @@ -228,7 +228,7 @@ int BPF_PROG(t2_clone_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c index b74a354d44..ac8ba9e41a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/clone3.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(clone3_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CLONE3_E_SIZE, PPME_SYSCALL_CLONE3_E)) { + if(!ringbuf__reserve_space(&ringbuf, CLONE3_E_SIZE, PPME_SYSCALL_CLONE3_E)) { return 0; } @@ -226,7 +226,7 @@ int BPF_PROG(t2_clone3_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/close.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/close.bpf.c index 93c51c89c8..53bc2375f1 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/close.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/close.bpf.c @@ -42,7 +42,7 @@ int BPF_PROG(close_e, struct pt_regs *regs, long id) { } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CLOSE_E_SIZE, PPME_SYSCALL_CLOSE_E)) { + if(!ringbuf__reserve_space(&ringbuf, CLOSE_E_SIZE, PPME_SYSCALL_CLOSE_E)) { return 0; } @@ -72,7 +72,7 @@ int BPF_PROG(close_x, struct pt_regs *regs, long ret) { } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, CLOSE_X_SIZE, PPME_SYSCALL_CLOSE_X)) { + if(!ringbuf__reserve_space(&ringbuf, CLOSE_X_SIZE, PPME_SYSCALL_CLOSE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/connect.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/connect.bpf.c index 3e36f4d953..49086e195d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/connect.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/connect.bpf.c @@ -37,7 +37,7 @@ int BPF_PROG(connect_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -81,7 +81,7 @@ int BPF_PROG(connect_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/copy_file_range.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/copy_file_range.bpf.c index 80336c49c3..355bfd2935 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/copy_file_range.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/copy_file_range.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(copy_file_range_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, + COPY_FILE_RANGE_E_SIZE, PPME_SYSCALL_COPY_FILE_RANGE_E)) { return 0; @@ -50,10 +50,7 @@ int BPF_PROG(copy_file_range_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(copy_file_range_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - COPY_FILE_RANGE_X_SIZE, - PPME_SYSCALL_COPY_FILE_RANGE_X)) { + if(!ringbuf__reserve_space(&ringbuf, COPY_FILE_RANGE_X_SIZE, PPME_SYSCALL_COPY_FILE_RANGE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/creat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/creat.bpf.c index 617c239a75..83fbbacc9f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/creat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/creat.bpf.c @@ -33,7 +33,7 @@ int BPF_PROG(creat_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -90,7 +90,7 @@ int BPF_PROG(creat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/delete_module.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/delete_module.bpf.c index da08bff07f..8d17c94bdf 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/delete_module.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/delete_module.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(delete_module_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DELETE_MODULE_E_SIZE, PPME_SYSCALL_DELETE_MODULE_E)) { + if(!ringbuf__reserve_space(&ringbuf, DELETE_MODULE_E_SIZE, PPME_SYSCALL_DELETE_MODULE_E)) { return 0; } @@ -61,7 +61,7 @@ int BPF_PROG(delete_module_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup.bpf.c index 301db7ba22..bfa6930df5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(dup_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP_E_SIZE, PPME_SYSCALL_DUP_1_E)) { + if(!ringbuf__reserve_space(&ringbuf, DUP_E_SIZE, PPME_SYSCALL_DUP_1_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(dup_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(dup_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP_X_SIZE, PPME_SYSCALL_DUP_1_X)) { + if(!ringbuf__reserve_space(&ringbuf, DUP_X_SIZE, PPME_SYSCALL_DUP_1_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup2.bpf.c index 54201dbb1a..ca9407e3b5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup2.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(dup2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP2_E_SIZE, PPME_SYSCALL_DUP2_E)) { + if(!ringbuf__reserve_space(&ringbuf, DUP2_E_SIZE, PPME_SYSCALL_DUP2_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(dup2_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(dup2_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP2_X_SIZE, PPME_SYSCALL_DUP2_X)) { + if(!ringbuf__reserve_space(&ringbuf, DUP2_X_SIZE, PPME_SYSCALL_DUP2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup3.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup3.bpf.c index 3e833f137c..fda56c7c7b 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup3.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/dup3.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(dup3_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP3_E_SIZE, PPME_SYSCALL_DUP3_E)) { + if(!ringbuf__reserve_space(&ringbuf, DUP3_E_SIZE, PPME_SYSCALL_DUP3_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(dup3_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(dup3_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, DUP3_X_SIZE, PPME_SYSCALL_DUP3_X)) { + if(!ringbuf__reserve_space(&ringbuf, DUP3_X_SIZE, PPME_SYSCALL_DUP3_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create.bpf.c index 35f3cde769..e1c8bf373f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(epoll_create_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_CREATE_E_SIZE, PPME_SYSCALL_EPOLL_CREATE_E)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_CREATE_E_SIZE, PPME_SYSCALL_EPOLL_CREATE_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(epoll_create_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(epoll_create_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_CREATE_X_SIZE, PPME_SYSCALL_EPOLL_CREATE_X)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_CREATE_X_SIZE, PPME_SYSCALL_EPOLL_CREATE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create1.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create1.bpf.c index 159a4b6e6e..adb286afbd 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create1.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_create1.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(epoll_create1_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_CREATE1_E_SIZE, PPME_SYSCALL_EPOLL_CREATE1_E)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_CREATE1_E_SIZE, PPME_SYSCALL_EPOLL_CREATE1_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(epoll_create1_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(epoll_create1_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_CREATE1_X_SIZE, PPME_SYSCALL_EPOLL_CREATE1_X)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_CREATE1_X_SIZE, PPME_SYSCALL_EPOLL_CREATE1_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_wait.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_wait.bpf.c index 01aa162b74..afab49ccab 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_wait.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/epoll_wait.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(epoll_wait_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_WAIT_E_SIZE, PPME_SYSCALL_EPOLLWAIT_E)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_WAIT_E_SIZE, PPME_SYSCALL_EPOLLWAIT_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(epoll_wait_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(epoll_wait_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EPOLL_WAIT_X_SIZE, PPME_SYSCALL_EPOLLWAIT_X)) { + if(!ringbuf__reserve_space(&ringbuf, EPOLL_WAIT_X_SIZE, PPME_SYSCALL_EPOLLWAIT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd.bpf.c index 890e76de71..9ed9f73aca 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(eventfd_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EVENTFD_E_SIZE, PPME_SYSCALL_EVENTFD_E)) { + if(!ringbuf__reserve_space(&ringbuf, EVENTFD_E_SIZE, PPME_SYSCALL_EVENTFD_E)) { return 0; } @@ -45,7 +45,7 @@ int BPF_PROG(eventfd_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(eventfd_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EVENTFD_X_SIZE, PPME_SYSCALL_EVENTFD_X)) { + if(!ringbuf__reserve_space(&ringbuf, EVENTFD_X_SIZE, PPME_SYSCALL_EVENTFD_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd2.bpf.c index bd8284e566..4f9c29393a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/eventfd2.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(eventfd2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EVENTFD2_E_SIZE, PPME_SYSCALL_EVENTFD2_E)) { + if(!ringbuf__reserve_space(&ringbuf, EVENTFD2_E_SIZE, PPME_SYSCALL_EVENTFD2_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(eventfd2_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(eventfd2_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, EVENTFD2_X_SIZE, PPME_SYSCALL_EVENTFD2_X)) { + if(!ringbuf__reserve_space(&ringbuf, EVENTFD2_X_SIZE, PPME_SYSCALL_EVENTFD2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c index 0906d32e5c..6f4da6a350 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execve.bpf.c @@ -28,7 +28,7 @@ int BPF_PROG(execve_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -311,7 +311,7 @@ int BPF_PROG(t2_execve_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c index 86ccf2ba51..ca847a213f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/execveat.bpf.c @@ -39,7 +39,7 @@ int BPF_PROG(execveat_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -323,7 +323,7 @@ int BPF_PROG(t2_execveat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchdir.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchdir.bpf.c index 8d348f959f..df141d3d8c 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchdir.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchdir.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fchdir_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHDIR_E_SIZE, PPME_SYSCALL_FCHDIR_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCHDIR_E_SIZE, PPME_SYSCALL_FCHDIR_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(fchdir_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(fchdir_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHDIR_X_SIZE, PPME_SYSCALL_FCHDIR_X)) { + if(!ringbuf__reserve_space(&ringbuf, FCHDIR_X_SIZE, PPME_SYSCALL_FCHDIR_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmod.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmod.bpf.c index 0be335b573..9195184016 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmod.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmod.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fchmod_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHMOD_E_SIZE, PPME_SYSCALL_FCHMOD_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCHMOD_E_SIZE, PPME_SYSCALL_FCHMOD_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(fchmod_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(fchmod_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHMOD_X_SIZE, PPME_SYSCALL_FCHMOD_X)) { + if(!ringbuf__reserve_space(&ringbuf, FCHMOD_X_SIZE, PPME_SYSCALL_FCHMOD_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmodat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmodat.bpf.c index 929b3bccb0..1488556b02 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmodat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchmodat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fchmodat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHMODAT_E_SIZE, PPME_SYSCALL_FCHMODAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCHMODAT_E_SIZE, PPME_SYSCALL_FCHMODAT_E)) { return 0; } @@ -68,7 +68,7 @@ int BPF_PROG(fchmodat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchown.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchown.bpf.c index bbfeddfbde..e1daf2f1ea 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchown.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchown.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fchown_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHOWN_E_SIZE, PPME_SYSCALL_FCHOWN_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCHOWN_E_SIZE, PPME_SYSCALL_FCHOWN_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(fchown_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(fchown_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHOWN_X_SIZE, PPME_SYSCALL_FCHOWN_X)) { + if(!ringbuf__reserve_space(&ringbuf, FCHOWN_X_SIZE, PPME_SYSCALL_FCHOWN_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchownat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchownat.bpf.c index f3c703e61f..09ee554021 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchownat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fchownat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fchownat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCHOWNAT_E_SIZE, PPME_SYSCALL_FCHOWNAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCHOWNAT_E_SIZE, PPME_SYSCALL_FCHOWNAT_E)) { return 0; } @@ -76,7 +76,7 @@ int BPF_PROG(fchownat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fcntl.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fcntl.bpf.c index 8ab8c29aac..4960b518f9 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fcntl.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fcntl.bpf.c @@ -25,7 +25,7 @@ int BPF_PROG(fcntl_e, struct pt_regs *regs, long id) { } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCNTL_E_SIZE, PPME_SYSCALL_FCNTL_E)) { + if(!ringbuf__reserve_space(&ringbuf, FCNTL_E_SIZE, PPME_SYSCALL_FCNTL_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(fcntl_x, struct pt_regs *regs, long ret) { } struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FCNTL_X_SIZE, PPME_SYSCALL_FCNTL_X)) { + if(!ringbuf__reserve_space(&ringbuf, FCNTL_X_SIZE, PPME_SYSCALL_FCNTL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/finit_module.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/finit_module.bpf.c index 924a39bd98..14a32b6582 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/finit_module.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/finit_module.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(finit_module_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FINIT_MODULE_E_SIZE, PPME_SYSCALL_FINIT_MODULE_E)) { + if(!ringbuf__reserve_space(&ringbuf, FINIT_MODULE_E_SIZE, PPME_SYSCALL_FINIT_MODULE_E)) { return 0; } @@ -65,7 +65,7 @@ int BPF_PROG(finit_module_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/flock.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/flock.bpf.c index a5c350286b..aad159ca34 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/flock.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/flock.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(flock_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FLOCK_E_SIZE, PPME_SYSCALL_FLOCK_E)) { + if(!ringbuf__reserve_space(&ringbuf, FLOCK_E_SIZE, PPME_SYSCALL_FLOCK_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(flock_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(flock_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FLOCK_X_SIZE, PPME_SYSCALL_FLOCK_X)) { + if(!ringbuf__reserve_space(&ringbuf, FLOCK_X_SIZE, PPME_SYSCALL_FLOCK_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c index 2a1241def0..983130d87f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fork.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fork_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FORK_E_SIZE, PPME_SYSCALL_FORK_20_E)) { + if(!ringbuf__reserve_space(&ringbuf, FORK_E_SIZE, PPME_SYSCALL_FORK_20_E)) { return 0; } @@ -220,7 +220,7 @@ int BPF_PROG(t2_fork_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fsconfig.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fsconfig.bpf.c index d1facea82d..a122858531 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fsconfig.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fsconfig.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fsconfig_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FSCONFIG_E_SIZE, PPME_SYSCALL_FSCONFIG_E)) { + if(!ringbuf__reserve_space(&ringbuf, FSCONFIG_E_SIZE, PPME_SYSCALL_FSCONFIG_E)) { return 0; } @@ -136,7 +136,7 @@ int BPF_PROG(fsconfig_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fstat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fstat.bpf.c index ab899a37d4..8aeb6c571a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fstat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/fstat.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(fstat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FSTAT_E_SIZE, PPME_SYSCALL_FSTAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, FSTAT_E_SIZE, PPME_SYSCALL_FSTAT_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(fstat_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(fstat_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FSTAT_X_SIZE, PPME_SYSCALL_FSTAT_X)) { + if(!ringbuf__reserve_space(&ringbuf, FSTAT_X_SIZE, PPME_SYSCALL_FSTAT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/futex.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/futex.bpf.c index c901387355..68eb727789 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/futex.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/futex.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(futex_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FUTEX_E_SIZE, PPME_SYSCALL_FUTEX_E)) { + if(!ringbuf__reserve_space(&ringbuf, FUTEX_E_SIZE, PPME_SYSCALL_FUTEX_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(futex_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(futex_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, FUTEX_X_SIZE, PPME_SYSCALL_FUTEX_X)) { + if(!ringbuf__reserve_space(&ringbuf, FUTEX_X_SIZE, PPME_SYSCALL_FUTEX_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/generic.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/generic.bpf.c index 9975816d7b..2c4cca26ed 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/generic.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/generic.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(generic_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GENERIC_E_SIZE, PPME_GENERIC_E)) { + if(!ringbuf__reserve_space(&ringbuf, GENERIC_E_SIZE, PPME_GENERIC_E)) { return 0; } @@ -52,7 +52,7 @@ int BPF_PROG(generic_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(generic_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GENERIC_X_SIZE, PPME_GENERIC_X)) { + if(!ringbuf__reserve_space(&ringbuf, GENERIC_X_SIZE, PPME_GENERIC_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getcwd.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getcwd.bpf.c index 68003a4706..0d79466add 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getcwd.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getcwd.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getcwd_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETCWD_E_SIZE, PPME_SYSCALL_GETCWD_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETCWD_E_SIZE, PPME_SYSCALL_GETCWD_E)) { return 0; } @@ -64,7 +64,7 @@ int BPF_PROG(getcwd_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents.bpf.c index ccf832b8c5..9e012ff307 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getdents_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETDENTS_E_SIZE, PPME_SYSCALL_GETDENTS_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETDENTS_E_SIZE, PPME_SYSCALL_GETDENTS_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(getdents_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getdents_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETDENTS_X_SIZE, PPME_SYSCALL_GETDENTS_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETDENTS_X_SIZE, PPME_SYSCALL_GETDENTS_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents64.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents64.bpf.c index 3ec34d142c..a4653755cb 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents64.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getdents64.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getdents64_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETDENTS64_E_SIZE, PPME_SYSCALL_GETDENTS64_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETDENTS64_E_SIZE, PPME_SYSCALL_GETDENTS64_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(getdents64_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getdents64_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETDENTS64_X_SIZE, PPME_SYSCALL_GETDENTS64_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETDENTS64_X_SIZE, PPME_SYSCALL_GETDENTS64_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getegid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getegid.bpf.c index d45e721ed2..27a5dfabb3 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getegid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getegid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getegid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETEGID_E_SIZE, PPME_SYSCALL_GETEGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETEGID_E_SIZE, PPME_SYSCALL_GETEGID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(getegid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getegid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETEGID_X_SIZE, PPME_SYSCALL_GETEGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETEGID_X_SIZE, PPME_SYSCALL_GETEGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/geteuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/geteuid.bpf.c index aebbff35ae..3dad99fa38 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/geteuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/geteuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(geteuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETEUID_E_SIZE, PPME_SYSCALL_GETEUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETEUID_E_SIZE, PPME_SYSCALL_GETEUID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(geteuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(geteuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETEUID_X_SIZE, PPME_SYSCALL_GETEUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETEUID_X_SIZE, PPME_SYSCALL_GETEUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getgid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getgid.bpf.c index d24fa144c9..de24f8e333 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getgid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getgid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getgid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETGID_E_SIZE, PPME_SYSCALL_GETGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETGID_E_SIZE, PPME_SYSCALL_GETGID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(getgid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getgid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETGID_X_SIZE, PPME_SYSCALL_GETGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETGID_X_SIZE, PPME_SYSCALL_GETGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getpeername.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getpeername.bpf.c index 7162d5da48..07c405ae93 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getpeername.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getpeername.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getpeername_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETPEERNAME_E_SIZE, PPME_SOCKET_GETPEERNAME_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETPEERNAME_E_SIZE, PPME_SOCKET_GETPEERNAME_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(getpeername_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getpeername_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETPEERNAME_X_SIZE, PPME_SOCKET_GETPEERNAME_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETPEERNAME_X_SIZE, PPME_SOCKET_GETPEERNAME_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresgid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresgid.bpf.c index c591a96768..2ff57762a7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresgid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresgid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getresgid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRESGID_E_SIZE, PPME_SYSCALL_GETRESGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETRESGID_E_SIZE, PPME_SYSCALL_GETRESGID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(getresgid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getresgid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRESGID_X_SIZE, PPME_SYSCALL_GETRESGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETRESGID_X_SIZE, PPME_SYSCALL_GETRESGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresuid.bpf.c index 3d013d91c1..b1bfc69768 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getresuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getresuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRESUID_E_SIZE, PPME_SYSCALL_GETRESUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETRESUID_E_SIZE, PPME_SYSCALL_GETRESUID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(getresuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getresuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRESUID_X_SIZE, PPME_SYSCALL_GETRESUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETRESUID_X_SIZE, PPME_SYSCALL_GETRESUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getrlimit.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getrlimit.bpf.c index 51a4a6c0d4..59aa94ec21 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getrlimit.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getrlimit.bpf.c @@ -15,7 +15,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getrlimit_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRLIMIT_E_SIZE, PPME_SYSCALL_GETRLIMIT_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETRLIMIT_E_SIZE, PPME_SYSCALL_GETRLIMIT_E)) { return 0; } @@ -41,7 +41,7 @@ int BPF_PROG(getrlimit_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getrlimit_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETRLIMIT_X_SIZE, PPME_SYSCALL_GETRLIMIT_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETRLIMIT_X_SIZE, PPME_SYSCALL_GETRLIMIT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockname.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockname.bpf.c index cc3c0e6197..1f5e672ad1 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockname.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockname.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getsockname_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETSOCKNAME_E_SIZE, PPME_SOCKET_GETSOCKNAME_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETSOCKNAME_E_SIZE, PPME_SOCKET_GETSOCKNAME_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(getsockname_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getsockname_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETSOCKNAME_X_SIZE, PPME_SOCKET_GETSOCKNAME_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETSOCKNAME_X_SIZE, PPME_SOCKET_GETSOCKNAME_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockopt.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockopt.bpf.c index f2643c07f1..c725a37815 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockopt.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getsockopt.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getsockopt_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETSOCKOPT_E_SIZE, PPME_SOCKET_GETSOCKOPT_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETSOCKOPT_E_SIZE, PPME_SOCKET_GETSOCKOPT_E)) { return 0; } @@ -83,7 +83,7 @@ int BPF_PROG(getsockopt_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getuid.bpf.c index 461d18c15a..270ce09a7d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/getuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(getuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETUID_E_SIZE, PPME_SYSCALL_GETUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, GETUID_E_SIZE, PPME_SYSCALL_GETUID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(getuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(getuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, GETUID_X_SIZE, PPME_SYSCALL_GETUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, GETUID_X_SIZE, PPME_SYSCALL_GETUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/init_module.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/init_module.bpf.c index cec78a40dc..ab7725c9d5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/init_module.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/init_module.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(init_module_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, INIT_MODULE_E_SIZE, PPME_SYSCALL_INIT_MODULE_E)) { + if(!ringbuf__reserve_space(&ringbuf, INIT_MODULE_E_SIZE, PPME_SYSCALL_INIT_MODULE_E)) { return 0; } @@ -66,7 +66,7 @@ int BPF_PROG(init_module_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init.bpf.c index de95403feb..4772d79ffb 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(inotify_init_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, INOTIFY_INIT_E_SIZE, PPME_SYSCALL_INOTIFY_INIT_E)) { + if(!ringbuf__reserve_space(&ringbuf, INOTIFY_INIT_E_SIZE, PPME_SYSCALL_INOTIFY_INIT_E)) { return 0; } @@ -42,7 +42,7 @@ int BPF_PROG(inotify_init_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(inotify_init_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, INOTIFY_INIT_X_SIZE, PPME_SYSCALL_INOTIFY_INIT_X)) { + if(!ringbuf__reserve_space(&ringbuf, INOTIFY_INIT_X_SIZE, PPME_SYSCALL_INOTIFY_INIT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init1.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init1.bpf.c index 6dc0d1da11..e60b3357ad 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init1.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/inotify_init1.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(inotify_init1_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, INOTIFY_INIT1_E_SIZE, PPME_SYSCALL_INOTIFY_INIT1_E)) { + if(!ringbuf__reserve_space(&ringbuf, INOTIFY_INIT1_E_SIZE, PPME_SYSCALL_INOTIFY_INIT1_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(inotify_init1_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(inotify_init1_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, INOTIFY_INIT1_X_SIZE, PPME_SYSCALL_INOTIFY_INIT1_X)) { + if(!ringbuf__reserve_space(&ringbuf, INOTIFY_INIT1_X_SIZE, PPME_SYSCALL_INOTIFY_INIT1_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_enter.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_enter.bpf.c index 6371213cf7..78dee7e01d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_enter.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_enter.bpf.c @@ -13,10 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(io_uring_enter_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - IO_URING_ENTER_E_SIZE, - PPME_SYSCALL_IO_URING_ENTER_E)) { + if(!ringbuf__reserve_space(&ringbuf, IO_URING_ENTER_E_SIZE, PPME_SYSCALL_IO_URING_ENTER_E)) { return 0; } @@ -40,10 +37,7 @@ int BPF_PROG(io_uring_enter_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(io_uring_enter_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - IO_URING_ENTER_X_SIZE, - PPME_SYSCALL_IO_URING_ENTER_X)) { + if(!ringbuf__reserve_space(&ringbuf, IO_URING_ENTER_X_SIZE, PPME_SYSCALL_IO_URING_ENTER_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_register.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_register.bpf.c index cc9058394b..2bf1b0aba5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_register.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_register.bpf.c @@ -14,7 +14,6 @@ SEC("tp_btf/sys_enter") int BPF_PROG(io_uring_register_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, IO_URING_REGISTER_E_SIZE, PPME_SYSCALL_IO_URING_REGISTER_E)) { return 0; @@ -41,7 +40,6 @@ SEC("tp_btf/sys_exit") int BPF_PROG(io_uring_register_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, IO_URING_REGISTER_X_SIZE, PPME_SYSCALL_IO_URING_REGISTER_X)) { return 0; diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_setup.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_setup.bpf.c index 9fa8bc49f8..534411d6c5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_setup.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/io_uring_setup.bpf.c @@ -13,10 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(io_uring_setup_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - IO_URING_SETUP_E_SIZE, - PPME_SYSCALL_IO_URING_SETUP_E)) { + if(!ringbuf__reserve_space(&ringbuf, IO_URING_SETUP_E_SIZE, PPME_SYSCALL_IO_URING_SETUP_E)) { return 0; } @@ -40,10 +37,7 @@ int BPF_PROG(io_uring_setup_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(io_uring_setup_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - IO_URING_SETUP_X_SIZE, - PPME_SYSCALL_IO_URING_SETUP_X)) { + if(!ringbuf__reserve_space(&ringbuf, IO_URING_SETUP_X_SIZE, PPME_SYSCALL_IO_URING_SETUP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ioctl.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ioctl.bpf.c index b70ea3cf95..3c41b8b452 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ioctl.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ioctl.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(ioctl_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, IOCTL_E_SIZE, PPME_SYSCALL_IOCTL_3_E)) { + if(!ringbuf__reserve_space(&ringbuf, IOCTL_E_SIZE, PPME_SYSCALL_IOCTL_3_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(ioctl_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(ioctl_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, IOCTL_X_SIZE, PPME_SYSCALL_IOCTL_3_X)) { + if(!ringbuf__reserve_space(&ringbuf, IOCTL_X_SIZE, PPME_SYSCALL_IOCTL_3_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/kill.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/kill.bpf.c index a16f7f5780..619516f319 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/kill.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/kill.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(kill_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, KILL_E_SIZE, PPME_SYSCALL_KILL_E)) { + if(!ringbuf__reserve_space(&ringbuf, KILL_E_SIZE, PPME_SYSCALL_KILL_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(kill_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(kill_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, KILL_X_SIZE, PPME_SYSCALL_KILL_X)) { + if(!ringbuf__reserve_space(&ringbuf, KILL_X_SIZE, PPME_SYSCALL_KILL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lchown.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lchown.bpf.c index 5af19d6f17..e1bb88d108 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lchown.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lchown.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(lchown_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LCHOWN_E_SIZE, PPME_SYSCALL_LCHOWN_E)) { + if(!ringbuf__reserve_space(&ringbuf, LCHOWN_E_SIZE, PPME_SYSCALL_LCHOWN_E)) { return 0; } @@ -65,7 +65,7 @@ int BPF_PROG(lchown_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/link.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/link.bpf.c index 7017d509ce..726440b20c 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/link.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/link.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(link_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LINK_E_SIZE, PPME_SYSCALL_LINK_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, LINK_E_SIZE, PPME_SYSCALL_LINK_2_E)) { return 0; } @@ -61,7 +61,7 @@ int BPF_PROG(link_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/linkat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/linkat.bpf.c index ec1879c0e8..2b2597adbf 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/linkat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/linkat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(linkat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LINKAT_E_SIZE, PPME_SYSCALL_LINKAT_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, LINKAT_E_SIZE, PPME_SYSCALL_LINKAT_2_E)) { return 0; } @@ -79,7 +79,7 @@ int BPF_PROG(linkat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/listen.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/listen.bpf.c index d16483f291..b36ea8ff3d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/listen.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/listen.bpf.c @@ -17,7 +17,7 @@ int BPF_PROG(listen_e, struct pt_regs *regs, long id) { extract__network_args(args, 2, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LISTEN_E_SIZE, PPME_SOCKET_LISTEN_E)) { + if(!ringbuf__reserve_space(&ringbuf, LISTEN_E_SIZE, PPME_SOCKET_LISTEN_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(listen_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(listen_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LISTEN_X_SIZE, PPME_SOCKET_LISTEN_X)) { + if(!ringbuf__reserve_space(&ringbuf, LISTEN_X_SIZE, PPME_SOCKET_LISTEN_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/llseek.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/llseek.bpf.c index f34e0f188c..6447927b23 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/llseek.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/llseek.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(llseek_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LLSEEK_E_SIZE, PPME_SYSCALL_LLSEEK_E)) { + if(!ringbuf__reserve_space(&ringbuf, LLSEEK_E_SIZE, PPME_SYSCALL_LLSEEK_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(llseek_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(llseek_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LLSEEK_X_SIZE, PPME_SYSCALL_LLSEEK_X)) { + if(!ringbuf__reserve_space(&ringbuf, LLSEEK_X_SIZE, PPME_SYSCALL_LLSEEK_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lseek.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lseek.bpf.c index c2d0fb4203..6963cd0c42 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lseek.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lseek.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(lseek_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LSEEK_E_SIZE, PPME_SYSCALL_LSEEK_E)) { + if(!ringbuf__reserve_space(&ringbuf, LSEEK_E_SIZE, PPME_SYSCALL_LSEEK_E)) { return 0; } @@ -45,7 +45,7 @@ int BPF_PROG(lseek_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(lseek_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LSEEK_X_SIZE, PPME_SYSCALL_LSEEK_X)) { + if(!ringbuf__reserve_space(&ringbuf, LSEEK_X_SIZE, PPME_SYSCALL_LSEEK_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lstat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lstat.bpf.c index 97d73c19ff..023a9aa641 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lstat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/lstat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(lstat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, LSTAT_E_SIZE, PPME_SYSCALL_LSTAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, LSTAT_E_SIZE, PPME_SYSCALL_LSTAT_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(lstat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/memfd_create.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/memfd_create.bpf.c index 0f5b7fa747..63c9ca12c9 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/memfd_create.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/memfd_create.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(memfd_create_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MEMFD_CREATE_E_SIZE, PPME_SYSCALL_MEMFD_CREATE_E)) { + if(!ringbuf__reserve_space(&ringbuf, MEMFD_CREATE_E_SIZE, PPME_SYSCALL_MEMFD_CREATE_E)) { return 0; } @@ -58,7 +58,7 @@ int BPF_PROG(memfd_create_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdir.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdir.bpf.c index 8e5b13a9c1..27cc99e34e 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdir.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdir.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mkdir_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MKDIR_E_SIZE, PPME_SYSCALL_MKDIR_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, MKDIR_E_SIZE, PPME_SYSCALL_MKDIR_2_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(mkdir_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdirat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdirat.bpf.c index 8d7245189e..b5ff6f6958 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdirat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mkdirat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mkdirat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MKDIRAT_E_SIZE, PPME_SYSCALL_MKDIRAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, MKDIRAT_E_SIZE, PPME_SYSCALL_MKDIRAT_E)) { return 0; } @@ -68,7 +68,7 @@ int BPF_PROG(mkdirat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknod.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknod.bpf.c index 651e63281a..56ebe0807d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknod.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknod.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mknod_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MKNOD_E_SIZE, PPME_SYSCALL_MKNOD_E)) { + if(!ringbuf__reserve_space(&ringbuf, MKNOD_E_SIZE, PPME_SYSCALL_MKNOD_E)) { return 0; } @@ -65,7 +65,7 @@ int BPF_PROG(mknod_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknodat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknodat.bpf.c index a29c845192..b8a7f223bc 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknodat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mknodat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mknodat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MKNODAT_E_SIZE, PPME_SYSCALL_MKNODAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, MKNODAT_E_SIZE, PPME_SYSCALL_MKNODAT_E)) { return 0; } @@ -72,7 +72,7 @@ int BPF_PROG(mknodat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock.bpf.c index 925cdf03d7..a1a6b576e8 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mlock_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCK_E_SIZE, PPME_SYSCALL_MLOCK_E)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCK_E_SIZE, PPME_SYSCALL_MLOCK_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(mlock_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mlock_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCK_X_SIZE, PPME_SYSCALL_MLOCK_X)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCK_X_SIZE, PPME_SYSCALL_MLOCK_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock2.bpf.c index 518decea87..ff9f15772d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlock2.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mlock2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCK2_E_SIZE, PPME_SYSCALL_MLOCK2_E)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCK2_E_SIZE, PPME_SYSCALL_MLOCK2_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(mlock2_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mlock2_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCK2_X_SIZE, PPME_SYSCALL_MLOCK2_X)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCK2_X_SIZE, PPME_SYSCALL_MLOCK2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlockall.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlockall.bpf.c index c196e7b504..b28faaeffc 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlockall.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mlockall.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mlockall_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCKALL_E_SIZE, PPME_SYSCALL_MLOCKALL_E)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCKALL_E_SIZE, PPME_SYSCALL_MLOCKALL_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(mlockall_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mlockall_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MLOCKALL_X_SIZE, PPME_SYSCALL_MLOCKALL_X)) { + if(!ringbuf__reserve_space(&ringbuf, MLOCKALL_X_SIZE, PPME_SYSCALL_MLOCKALL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap.bpf.c index 67007645da..aa7e8217f3 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mmap_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MMAP_E_SIZE, PPME_SYSCALL_MMAP_E)) { + if(!ringbuf__reserve_space(&ringbuf, MMAP_E_SIZE, PPME_SYSCALL_MMAP_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(mmap_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mmap_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MMAP_X_SIZE, PPME_SYSCALL_MMAP_X)) { + if(!ringbuf__reserve_space(&ringbuf, MMAP_X_SIZE, PPME_SYSCALL_MMAP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap2.bpf.c index e83cbaa9c0..dfc5471ddc 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mmap2.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mmap2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MMAP2_E_SIZE, PPME_SYSCALL_MMAP2_E)) { + if(!ringbuf__reserve_space(&ringbuf, MMAP2_E_SIZE, PPME_SYSCALL_MMAP2_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(mmap2_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mmap2_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MMAP2_X_SIZE, PPME_SYSCALL_MMAP2_X)) { + if(!ringbuf__reserve_space(&ringbuf, MMAP2_X_SIZE, PPME_SYSCALL_MMAP2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mount.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mount.bpf.c index 75a56b2b08..06d0e204cd 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mount.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mount.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mount_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MOUNT_E_SIZE, PPME_SYSCALL_MOUNT_E)) { + if(!ringbuf__reserve_space(&ringbuf, MOUNT_E_SIZE, PPME_SYSCALL_MOUNT_E)) { return 0; } @@ -79,7 +79,7 @@ int BPF_PROG(mount_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mprotect.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mprotect.bpf.c index b9714fd97d..009f14b805 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mprotect.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/mprotect.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(mprotect_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MPROTECT_E_SIZE, PPME_SYSCALL_MPROTECT_E)) { + if(!ringbuf__reserve_space(&ringbuf, MPROTECT_E_SIZE, PPME_SYSCALL_MPROTECT_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(mprotect_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(mprotect_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MPROTECT_X_SIZE, PPME_SYSCALL_MPROTECT_X)) { + if(!ringbuf__reserve_space(&ringbuf, MPROTECT_X_SIZE, PPME_SYSCALL_MPROTECT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlock.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlock.bpf.c index 528c4c8915..feabbfeaac 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlock.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlock.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(munlock_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNLOCK_E_SIZE, PPME_SYSCALL_MUNLOCK_E)) { + if(!ringbuf__reserve_space(&ringbuf, MUNLOCK_E_SIZE, PPME_SYSCALL_MUNLOCK_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(munlock_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(munlock_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNLOCK_X_SIZE, PPME_SYSCALL_MUNLOCK_X)) { + if(!ringbuf__reserve_space(&ringbuf, MUNLOCK_X_SIZE, PPME_SYSCALL_MUNLOCK_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlockall.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlockall.bpf.c index b67490fbd2..e43d2dea07 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlockall.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munlockall.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(munlockall_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNLOCKALL_E_SIZE, PPME_SYSCALL_MUNLOCKALL_E)) { + if(!ringbuf__reserve_space(&ringbuf, MUNLOCKALL_E_SIZE, PPME_SYSCALL_MUNLOCKALL_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(munlockall_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(munlockall_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNLOCKALL_X_SIZE, PPME_SYSCALL_MUNLOCKALL_X)) { + if(!ringbuf__reserve_space(&ringbuf, MUNLOCKALL_X_SIZE, PPME_SYSCALL_MUNLOCKALL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munmap.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munmap.bpf.c index 637deb70f7..8e0257d5b7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munmap.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/munmap.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(munmap_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNMAP_E_SIZE, PPME_SYSCALL_MUNMAP_E)) { + if(!ringbuf__reserve_space(&ringbuf, MUNMAP_E_SIZE, PPME_SYSCALL_MUNMAP_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(munmap_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(munmap_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, MUNMAP_X_SIZE, PPME_SYSCALL_MUNMAP_X)) { + if(!ringbuf__reserve_space(&ringbuf, MUNMAP_X_SIZE, PPME_SYSCALL_MUNMAP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/nanosleep.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/nanosleep.bpf.c index 7e88c76407..8584e9ece9 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/nanosleep.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/nanosleep.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(nanosleep_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, NANOSLEEP_E_SIZE, PPME_SYSCALL_NANOSLEEP_E)) { + if(!ringbuf__reserve_space(&ringbuf, NANOSLEEP_E_SIZE, PPME_SYSCALL_NANOSLEEP_E)) { return 0; } @@ -49,7 +49,7 @@ int BPF_PROG(nanosleep_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(nanosleep_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, NANOSLEEP_X_SIZE, PPME_SYSCALL_NANOSLEEP_X)) { + if(!ringbuf__reserve_space(&ringbuf, NANOSLEEP_X_SIZE, PPME_SYSCALL_NANOSLEEP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/newfstatat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/newfstatat.bpf.c index ab543ced66..96e7f159a7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/newfstatat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/newfstatat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(newfstatat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, NEWFSTATAT_E_SIZE, PPME_SYSCALL_NEWFSTATAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, NEWFSTATAT_E_SIZE, PPME_SYSCALL_NEWFSTATAT_E)) { return 0; } @@ -68,7 +68,7 @@ int BPF_PROG(newfstatat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open.bpf.c index 3dedae2768..f4e66b57cf 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open.bpf.c @@ -37,7 +37,7 @@ int BPF_PROG(open_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -98,7 +98,7 @@ int BPF_PROG(open_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c index 45c21c3896..274d84a03b 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/open_by_handle_at.bpf.c @@ -15,7 +15,6 @@ SEC("tp_btf/sys_enter") int BPF_PROG(open_by_handle_at_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, OPEN_BY_HANDLE_AT_E_SIZE, PPME_SYSCALL_OPEN_BY_HANDLE_AT_E)) { return 0; @@ -118,7 +117,7 @@ int BPF_PROG(t1_open_by_handle_at_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat.bpf.c index 786bdd663e..14e0d55903 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat.bpf.c @@ -44,7 +44,7 @@ int BPF_PROG(openat_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -112,7 +112,7 @@ int BPF_PROG(openat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat2.bpf.c index 63b0a9307e..c895200d50 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/openat2.bpf.c @@ -52,7 +52,7 @@ int BPF_PROG(openat2_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -129,7 +129,7 @@ int BPF_PROG(openat2_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_getfd.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_getfd.bpf.c index d4dd11309a..6955276e2f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_getfd.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_getfd.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pidfd_getfd_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_GETFD_E_SIZE, PPME_SYSCALL_PIDFD_GETFD_E)) { + if(!ringbuf__reserve_space(&ringbuf, PIDFD_GETFD_E_SIZE, PPME_SYSCALL_PIDFD_GETFD_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(pidfd_getfd_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_GETFD_X_SIZE, PPME_SYSCALL_PIDFD_GETFD_X)) { + if(!ringbuf__reserve_space(&ringbuf, PIDFD_GETFD_X_SIZE, PPME_SYSCALL_PIDFD_GETFD_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_open.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_open.bpf.c index f46602eaa0..7170f8f2d7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_open.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pidfd_open.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pidfd_open_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_OPEN_E_SIZE, PPME_SYSCALL_PIDFD_OPEN_E)) { + if(!ringbuf__reserve_space(&ringbuf, PIDFD_OPEN_E_SIZE, PPME_SYSCALL_PIDFD_OPEN_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(pidfd_open_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(pidfd_open_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_OPEN_X_SIZE, PPME_SYSCALL_PIDFD_OPEN_X)) { + if(!ringbuf__reserve_space(&ringbuf, PIDFD_OPEN_X_SIZE, PPME_SYSCALL_PIDFD_OPEN_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe.bpf.c index 9a6e165173..b2c89a2995 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pipe_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIPE_E_SIZE, PPME_SYSCALL_PIPE_E)) { + if(!ringbuf__reserve_space(&ringbuf, PIPE_E_SIZE, PPME_SYSCALL_PIPE_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(pipe_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(pipe_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIPE_X_SIZE, PPME_SYSCALL_PIPE_X)) { + if(!ringbuf__reserve_space(&ringbuf, PIPE_X_SIZE, PPME_SYSCALL_PIPE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe2.bpf.c index 3ce8237dcd..131925a7b9 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pipe2.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pipe2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIPE2_E_SIZE, PPME_SYSCALL_PIPE2_E)) { + if(!ringbuf__reserve_space(&ringbuf, PIPE2_E_SIZE, PPME_SYSCALL_PIPE2_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(pipe2_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(pipe2_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PIPE2_X_SIZE, PPME_SYSCALL_PIPE2_X)) { + if(!ringbuf__reserve_space(&ringbuf, PIPE2_X_SIZE, PPME_SYSCALL_PIPE2_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/poll.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/poll.bpf.c index c3f42a0516..abe789170a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/poll.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/poll.bpf.c @@ -40,7 +40,7 @@ int BPF_PROG(poll_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -74,7 +74,7 @@ int BPF_PROG(poll_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ppoll.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ppoll.bpf.c index 934f0d22e6..f64fab84f0 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ppoll.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ppoll.bpf.c @@ -67,7 +67,7 @@ int BPF_PROG(ppoll_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -101,7 +101,7 @@ int BPF_PROG(ppoll_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prctl.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prctl.bpf.c index 2ed50d1457..a313585aac 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prctl.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prctl.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(prctl_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PRCTL_E_SIZE, PPME_SYSCALL_PRCTL_E)) { + if(!ringbuf__reserve_space(&ringbuf, PRCTL_E_SIZE, PPME_SYSCALL_PRCTL_E)) { return 0; } @@ -85,7 +85,7 @@ int BPF_PROG(prctl_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pread64.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pread64.bpf.c index 35b61a31e6..25c650e03a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pread64.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pread64.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pread64_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PREAD64_E_SIZE, PPME_SYSCALL_PREAD_E)) { + if(!ringbuf__reserve_space(&ringbuf, PREAD64_E_SIZE, PPME_SYSCALL_PREAD_E)) { return 0; } @@ -81,7 +81,7 @@ int BPF_PROG(pread64_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/preadv.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/preadv.bpf.c index f62a03853f..0eda713df2 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/preadv.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/preadv.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(preadv_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PREADV_E_SIZE, PPME_SYSCALL_PREADV_E)) { + if(!ringbuf__reserve_space(&ringbuf, PREADV_E_SIZE, PPME_SYSCALL_PREADV_E)) { return 0; } @@ -85,7 +85,7 @@ int BPF_PROG(preadv_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prlimit64.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prlimit64.bpf.c index adea2e2881..8961b002b7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prlimit64.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/prlimit64.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(prlimit64_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PRLIMIT64_E_SIZE, PPME_SYSCALL_PRLIMIT_E)) { + if(!ringbuf__reserve_space(&ringbuf, PRLIMIT64_E_SIZE, PPME_SYSCALL_PRLIMIT_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(prlimit64_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(prlimit64_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PRLIMIT64_X_SIZE, PPME_SYSCALL_PRLIMIT_X)) { + if(!ringbuf__reserve_space(&ringbuf, PRLIMIT64_X_SIZE, PPME_SYSCALL_PRLIMIT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_readv.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_readv.bpf.c index 532e30ca6b..f2fe852388 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_readv.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_readv.bpf.c @@ -15,7 +15,6 @@ SEC("tp_btf/sys_enter") int BPF_PROG(process_vm_readv_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, PROCESS_VM_READV_E_SIZE, PPME_SYSCALL_PROCESS_VM_READV_E)) { return 0; @@ -80,7 +79,7 @@ int BPF_PROG(process_vm_readv_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_writev.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_writev.bpf.c index 3afa1e4a1b..7db933e957 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_writev.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/process_vm_writev.bpf.c @@ -15,7 +15,6 @@ SEC("tp_btf/sys_enter") int BPF_PROG(process_vm_writev_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; if(!ringbuf__reserve_space(&ringbuf, - ctx, PROCESS_VM_WRITEV_E_SIZE, PPME_SYSCALL_PROCESS_VM_WRITEV_E)) { return 0; @@ -80,7 +79,7 @@ int BPF_PROG(process_vm_writev_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ptrace.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ptrace.bpf.c index bc6c1e9e64..f086b8e97f 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ptrace.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/ptrace.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(ptrace_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PTRACE_E_SIZE, PPME_SYSCALL_PTRACE_E)) { + if(!ringbuf__reserve_space(&ringbuf, PTRACE_E_SIZE, PPME_SYSCALL_PTRACE_E)) { return 0; } @@ -71,7 +71,7 @@ int BPF_PROG(ptrace_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwrite64.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwrite64.bpf.c index 8a8c5f4777..643610b3d3 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwrite64.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwrite64.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pwrite64_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PWRITE64_E_SIZE, PPME_SYSCALL_PWRITE_E)) { + if(!ringbuf__reserve_space(&ringbuf, PWRITE64_E_SIZE, PPME_SYSCALL_PWRITE_E)) { return 0; } @@ -77,7 +77,7 @@ int BPF_PROG(pwrite64_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwritev.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwritev.bpf.c index ce90fd71eb..c0f87a6d74 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwritev.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/pwritev.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(pwritev_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, PWRITEV_E_SIZE, PPME_SYSCALL_PWRITEV_E)) { + if(!ringbuf__reserve_space(&ringbuf, PWRITEV_E_SIZE, PPME_SYSCALL_PWRITEV_E)) { return 0; } @@ -82,7 +82,7 @@ int BPF_PROG(pwritev_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/quotactl.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/quotactl.bpf.c index c8fb6e0b5c..1f2c0a3980 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/quotactl.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/quotactl.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(quotactl_e, struct pt_regs *regs, long syscall_id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, QUOTACTL_E_SIZE, PPME_SYSCALL_QUOTACTL_E)) { + if(!ringbuf__reserve_space(&ringbuf, QUOTACTL_E_SIZE, PPME_SYSCALL_QUOTACTL_E)) { return 0; } @@ -209,7 +209,7 @@ int BPF_PROG(quotactl_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/read.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/read.bpf.c index db4ea28e43..c6df32c6ba 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/read.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/read.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(read_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, READ_E_SIZE, PPME_SYSCALL_READ_E)) { + if(!ringbuf__reserve_space(&ringbuf, READ_E_SIZE, PPME_SYSCALL_READ_E)) { return 0; } @@ -77,7 +77,7 @@ int BPF_PROG(read_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/readv.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/readv.bpf.c index 07a79b41e5..2d8f6ba7c6 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/readv.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/readv.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(readv_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, READV_E_SIZE, PPME_SYSCALL_READV_E)) { + if(!ringbuf__reserve_space(&ringbuf, READV_E_SIZE, PPME_SYSCALL_READV_E)) { return 0; } @@ -81,7 +81,7 @@ int BPF_PROG(readv_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recv.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recv.bpf.c index 72dce1fc21..34a8106ccf 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recv.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recv.bpf.c @@ -18,7 +18,7 @@ int BPF_PROG(recv_e, struct pt_regs *regs, long id) { extract__network_args(args, 3, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RECV_E_SIZE, PPME_SOCKET_RECV_E)) { + if(!ringbuf__reserve_space(&ringbuf, RECV_E_SIZE, PPME_SOCKET_RECV_E)) { return 0; } @@ -82,7 +82,7 @@ int BPF_PROG(recv_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvfrom.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvfrom.bpf.c index ceba3632ef..7f90812e12 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvfrom.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvfrom.bpf.c @@ -18,7 +18,7 @@ int BPF_PROG(recvfrom_e, struct pt_regs *regs, long id) { extract__network_args(args, 3, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RECVFROM_E_SIZE, PPME_SOCKET_RECVFROM_E)) { + if(!ringbuf__reserve_space(&ringbuf, RECVFROM_E_SIZE, PPME_SOCKET_RECVFROM_E)) { return 0; } @@ -93,7 +93,7 @@ int BPF_PROG(recvfrom_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmmsg.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmmsg.bpf.c index 117f12fa94..98b6a62063 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmmsg.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmmsg.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(recvmmsg_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RECVMMSG_E_SIZE, PPME_SOCKET_RECVMMSG_E)) { + if(!ringbuf__reserve_space(&ringbuf, RECVMMSG_E_SIZE, PPME_SOCKET_RECVMMSG_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(recvmmsg_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(recvmmsg_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RECVMMSG_X_SIZE, PPME_SOCKET_RECVMMSG_X)) { + if(!ringbuf__reserve_space(&ringbuf, RECVMMSG_X_SIZE, PPME_SOCKET_RECVMMSG_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmsg.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmsg.bpf.c index d1a0d57875..b4c4b310f0 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmsg.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/recvmsg.bpf.c @@ -18,7 +18,7 @@ int BPF_PROG(recvmsg_e, struct pt_regs *regs, long id) { extract__network_args(&socket_fd, 1, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RECVMSG_E_SIZE, PPME_SOCKET_RECVMSG_E)) { + if(!ringbuf__reserve_space(&ringbuf, RECVMSG_E_SIZE, PPME_SOCKET_RECVMSG_E)) { return 0; } @@ -107,7 +107,7 @@ int BPF_PROG(recvmsg_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rename.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rename.bpf.c index dc252d6aa8..49c9665102 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rename.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rename.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(rename_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RENAME_E_SIZE, PPME_SYSCALL_RENAME_E)) { + if(!ringbuf__reserve_space(&ringbuf, RENAME_E_SIZE, PPME_SYSCALL_RENAME_E)) { return 0; } @@ -61,7 +61,7 @@ int BPF_PROG(rename_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat.bpf.c index b1edf9b0a4..dd36a18653 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(renameat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RENAMEAT_E_SIZE, PPME_SYSCALL_RENAMEAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, RENAMEAT_E_SIZE, PPME_SYSCALL_RENAMEAT_E)) { return 0; } @@ -75,7 +75,7 @@ int BPF_PROG(renameat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat2.bpf.c index 4d96aabb4e..6ab6988155 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/renameat2.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(renameat2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RENAMEAT2_E_SIZE, PPME_SYSCALL_RENAMEAT2_E)) { + if(!ringbuf__reserve_space(&ringbuf, RENAMEAT2_E_SIZE, PPME_SYSCALL_RENAMEAT2_E)) { return 0; } @@ -80,7 +80,7 @@ int BPF_PROG(renameat2_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rmdir.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rmdir.bpf.c index 419a169717..a7e70fbd7d 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rmdir.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/rmdir.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(rmdir_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, RMDIR_E_SIZE, PPME_SYSCALL_RMDIR_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, RMDIR_E_SIZE, PPME_SYSCALL_RMDIR_2_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(rmdir_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/seccomp.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/seccomp.bpf.c index 7c806af647..f70301898e 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/seccomp.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/seccomp.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(seccomp_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SECCOMP_E_SIZE, PPME_SYSCALL_SECCOMP_E)) { + if(!ringbuf__reserve_space(&ringbuf, SECCOMP_E_SIZE, PPME_SYSCALL_SECCOMP_E)) { return 0; } @@ -42,7 +42,7 @@ int BPF_PROG(seccomp_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(seccomp_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SECCOMP_X_SIZE, PPME_SYSCALL_SECCOMP_X)) { + if(!ringbuf__reserve_space(&ringbuf, SECCOMP_X_SIZE, PPME_SYSCALL_SECCOMP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/select.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/select.bpf.c index 8638949bbc..2207ccda62 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/select.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/select.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(select_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SELECT_E_SIZE, PPME_SYSCALL_SELECT_E)) { + if(!ringbuf__reserve_space(&ringbuf, SELECT_E_SIZE, PPME_SYSCALL_SELECT_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(select_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(select_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SELECT_X_SIZE, PPME_SYSCALL_SELECT_X)) { + if(!ringbuf__reserve_space(&ringbuf, SELECT_X_SIZE, PPME_SYSCALL_SELECT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semctl.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semctl.bpf.c index 9d39edcb66..523d55cecc 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semctl.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semctl.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(semctl_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMCTL_E_SIZE, PPME_SYSCALL_SEMCTL_E)) { + if(!ringbuf__reserve_space(&ringbuf, SEMCTL_E_SIZE, PPME_SYSCALL_SEMCTL_E)) { return 0; } @@ -50,7 +50,7 @@ int BPF_PROG(semctl_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(semctl_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMCTL_X_SIZE, PPME_SYSCALL_SEMCTL_X)) { + if(!ringbuf__reserve_space(&ringbuf, SEMCTL_X_SIZE, PPME_SYSCALL_SEMCTL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semget.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semget.bpf.c index 78a96158a2..03cbaee1bd 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semget.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semget.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(semget_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMGET_E_SIZE, PPME_SYSCALL_SEMGET_E)) { + if(!ringbuf__reserve_space(&ringbuf, SEMGET_E_SIZE, PPME_SYSCALL_SEMGET_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(semget_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(semget_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMGET_X_SIZE, PPME_SYSCALL_SEMGET_X)) { + if(!ringbuf__reserve_space(&ringbuf, SEMGET_X_SIZE, PPME_SYSCALL_SEMGET_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semop.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semop.bpf.c index 54b869e082..fc840c2842 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semop.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/semop.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(semop_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMOP_E_SIZE, PPME_SYSCALL_SEMOP_E)) { + if(!ringbuf__reserve_space(&ringbuf, SEMOP_E_SIZE, PPME_SYSCALL_SEMOP_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(semop_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(semop_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEMOP_X_SIZE, PPME_SYSCALL_SEMOP_X)) { + if(!ringbuf__reserve_space(&ringbuf, SEMOP_X_SIZE, PPME_SYSCALL_SEMOP_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/send.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/send.bpf.c index 95a427fda7..c7beaa5365 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/send.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/send.bpf.c @@ -18,7 +18,7 @@ int BPF_PROG(send_e, struct pt_regs *regs, long id) { extract__network_args(args, 3, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SEND_E_SIZE, PPME_SOCKET_SEND_E)) { + if(!ringbuf__reserve_space(&ringbuf, SEND_E_SIZE, PPME_SOCKET_SEND_E)) { return 0; } @@ -78,7 +78,7 @@ int BPF_PROG(send_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendfile.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendfile.bpf.c index e66b78c019..12a7c06ad7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendfile.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendfile.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(sendfile_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SENDFILE_E_SIZE, PPME_SYSCALL_SENDFILE_E)) { + if(!ringbuf__reserve_space(&ringbuf, SENDFILE_E_SIZE, PPME_SYSCALL_SENDFILE_E)) { return 0; } @@ -53,7 +53,7 @@ int BPF_PROG(sendfile_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(sendfile_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SENDFILE_X_SIZE, PPME_SYSCALL_SENDFILE_X)) { + if(!ringbuf__reserve_space(&ringbuf, SENDFILE_X_SIZE, PPME_SYSCALL_SENDFILE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmmsg.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmmsg.bpf.c index 36c80463e5..864030bf52 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmmsg.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmmsg.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(sendmmsg_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SENDMMSG_E_SIZE, PPME_SOCKET_SENDMMSG_E)) { + if(!ringbuf__reserve_space(&ringbuf, SENDMMSG_E_SIZE, PPME_SOCKET_SENDMMSG_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(sendmmsg_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(sendmmsg_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SENDMMSG_X_SIZE, PPME_SOCKET_SENDMMSG_X)) { + if(!ringbuf__reserve_space(&ringbuf, SENDMMSG_X_SIZE, PPME_SOCKET_SENDMMSG_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmsg.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmsg.bpf.c index f5307a78de..cc48b1ddf8 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmsg.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendmsg.bpf.c @@ -52,7 +52,7 @@ int BPF_PROG(sendmsg_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -98,7 +98,7 @@ int BPF_PROG(sendmsg_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendto.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendto.bpf.c index 3fdd6a8a9b..989c88e951 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendto.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/sendto.bpf.c @@ -50,7 +50,7 @@ int BPF_PROG(sendto_e, struct pt_regs *regs, long id) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } @@ -95,7 +95,7 @@ int BPF_PROG(sendto_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setgid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setgid.bpf.c index 6dfae9e213..aea208f5c7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setgid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setgid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setgid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETGID_E_SIZE, PPME_SYSCALL_SETGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETGID_E_SIZE, PPME_SYSCALL_SETGID_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(setgid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setgid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETGID_X_SIZE, PPME_SYSCALL_SETGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETGID_X_SIZE, PPME_SYSCALL_SETGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setns.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setns.bpf.c index 87b36d1a35..8f5f255686 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setns.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setns.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setns_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETNS_E_SIZE, PPME_SYSCALL_SETNS_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETNS_E_SIZE, PPME_SYSCALL_SETNS_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(setns_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setns_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETNS_X_SIZE, PPME_SYSCALL_SETNS_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETNS_X_SIZE, PPME_SYSCALL_SETNS_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setpgid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setpgid.bpf.c index ea54ad2042..3c347d1bd4 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setpgid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setpgid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setpgid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETPGID_E_SIZE, PPME_SYSCALL_SETPGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETPGID_E_SIZE, PPME_SYSCALL_SETPGID_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(setpgid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setpgid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETPGID_X_SIZE, PPME_SYSCALL_SETPGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETPGID_X_SIZE, PPME_SYSCALL_SETPGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setregid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setregid.bpf.c index 66f10515b3..88721a8033 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setregid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setregid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setregid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETREGID_E_SIZE, PPME_SYSCALL_SETREGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETREGID_E_SIZE, PPME_SYSCALL_SETREGID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(setregid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setregid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETREGID_X_SIZE, PPME_SYSCALL_SETREGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETREGID_X_SIZE, PPME_SYSCALL_SETREGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresgid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresgid.bpf.c index 69fe107f75..1f11184477 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresgid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresgid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setresgid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRESGID_E_SIZE, PPME_SYSCALL_SETRESGID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETRESGID_E_SIZE, PPME_SYSCALL_SETRESGID_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(setresgid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setresgid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRESGID_X_SIZE, PPME_SYSCALL_SETRESGID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETRESGID_X_SIZE, PPME_SYSCALL_SETRESGID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresuid.bpf.c index 9e1d6ea468..77f0243489 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setresuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setresuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRESUID_E_SIZE, PPME_SYSCALL_SETRESUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETRESUID_E_SIZE, PPME_SYSCALL_SETRESUID_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(setresuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setresuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRESUID_X_SIZE, PPME_SYSCALL_SETRESUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETRESUID_X_SIZE, PPME_SYSCALL_SETRESUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setreuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setreuid.bpf.c index 058a18b606..811900fe49 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setreuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setreuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setreuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETREUID_E_SIZE, PPME_SYSCALL_SETREUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETREUID_E_SIZE, PPME_SYSCALL_SETREUID_E)) { return 0; } @@ -35,7 +35,7 @@ int BPF_PROG(setreuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setreuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETREUID_X_SIZE, PPME_SYSCALL_SETREUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETREUID_X_SIZE, PPME_SYSCALL_SETREUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setrlimit.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setrlimit.bpf.c index 420cecda92..0d7c606766 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setrlimit.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setrlimit.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setrlimit_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRLIMIT_E_SIZE, PPME_SYSCALL_SETRLIMIT_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETRLIMIT_E_SIZE, PPME_SYSCALL_SETRLIMIT_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(setrlimit_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setrlimit_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETRLIMIT_X_SIZE, PPME_SYSCALL_SETRLIMIT_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETRLIMIT_X_SIZE, PPME_SYSCALL_SETRLIMIT_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsid.bpf.c index 35c98acbfc..bc37cd3fef 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setsid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETSID_E_SIZE, PPME_SYSCALL_SETSID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETSID_E_SIZE, PPME_SYSCALL_SETSID_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(setsid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setsid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETSID_X_SIZE, PPME_SYSCALL_SETSID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETSID_X_SIZE, PPME_SYSCALL_SETSID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsockopt.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsockopt.bpf.c index 3e5c92359a..5471e6c234 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsockopt.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setsockopt.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setsockopt_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETSOCKOPT_E_SIZE, PPME_SOCKET_SETSOCKOPT_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETSOCKOPT_E_SIZE, PPME_SOCKET_SETSOCKOPT_E)) { return 0; } @@ -77,7 +77,7 @@ int BPF_PROG(setsockopt_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setuid.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setuid.bpf.c index bde1f8295b..6889ec031e 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setuid.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/setuid.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(setuid_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETUID_E_SIZE, PPME_SYSCALL_SETUID_E)) { + if(!ringbuf__reserve_space(&ringbuf, SETUID_E_SIZE, PPME_SYSCALL_SETUID_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(setuid_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(setuid_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SETUID_X_SIZE, PPME_SYSCALL_SETUID_X)) { + if(!ringbuf__reserve_space(&ringbuf, SETUID_X_SIZE, PPME_SYSCALL_SETUID_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/shutdown.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/shutdown.bpf.c index 55fede6ca2..6a77636f6b 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/shutdown.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/shutdown.bpf.c @@ -17,7 +17,7 @@ int BPF_PROG(shutdown_e, struct pt_regs *regs, long id) { extract__network_args(args, 2, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SHUTDOWN_E_SIZE, PPME_SOCKET_SHUTDOWN_E)) { + if(!ringbuf__reserve_space(&ringbuf, SHUTDOWN_E_SIZE, PPME_SOCKET_SHUTDOWN_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(shutdown_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(shutdown_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SHUTDOWN_X_SIZE, PPME_SOCKET_SHUTDOWN_X)) { + if(!ringbuf__reserve_space(&ringbuf, SHUTDOWN_X_SIZE, PPME_SOCKET_SHUTDOWN_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd.bpf.c index a38f70d05a..efebbfbd61 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(signalfd_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SIGNALFD_E_SIZE, PPME_SYSCALL_SIGNALFD_E)) { + if(!ringbuf__reserve_space(&ringbuf, SIGNALFD_E_SIZE, PPME_SYSCALL_SIGNALFD_E)) { return 0; } @@ -49,7 +49,7 @@ int BPF_PROG(signalfd_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(signalfd_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SIGNALFD_X_SIZE, PPME_SYSCALL_SIGNALFD_X)) { + if(!ringbuf__reserve_space(&ringbuf, SIGNALFD_X_SIZE, PPME_SYSCALL_SIGNALFD_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd4.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd4.bpf.c index 3097ad382e..cf39a2fb53 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd4.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/signalfd4.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(signalfd4_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SIGNALFD4_E_SIZE, PPME_SYSCALL_SIGNALFD4_E)) { + if(!ringbuf__reserve_space(&ringbuf, SIGNALFD4_E_SIZE, PPME_SYSCALL_SIGNALFD4_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(signalfd4_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(signalfd4_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SIGNALFD4_X_SIZE, PPME_SYSCALL_SIGNALFD4_X)) { + if(!ringbuf__reserve_space(&ringbuf, SIGNALFD4_X_SIZE, PPME_SYSCALL_SIGNALFD4_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socket.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socket.bpf.c index 35c3c002e0..cf07e85eac 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socket.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socket.bpf.c @@ -17,7 +17,7 @@ int BPF_PROG(socket_e, struct pt_regs *regs, long id) { extract__network_args(args, 3, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SOCKET_E_SIZE, PPME_SOCKET_SOCKET_E)) { + if(!ringbuf__reserve_space(&ringbuf, SOCKET_E_SIZE, PPME_SOCKET_SOCKET_E)) { return 0; } @@ -54,7 +54,7 @@ int BPF_PROG(socket_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(socket_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SOCKET_X_SIZE, PPME_SOCKET_SOCKET_X)) { + if(!ringbuf__reserve_space(&ringbuf, SOCKET_X_SIZE, PPME_SOCKET_SOCKET_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socketpair.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socketpair.bpf.c index 5338fd9af1..3aaa9f77a5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socketpair.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/socketpair.bpf.c @@ -17,7 +17,7 @@ int BPF_PROG(socketpair_e, struct pt_regs *regs, long id) { extract__network_args(args, 3, regs); struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SOCKETPAIR_E_SIZE, PPME_SOCKET_SOCKETPAIR_E)) { + if(!ringbuf__reserve_space(&ringbuf, SOCKETPAIR_E_SIZE, PPME_SOCKET_SOCKETPAIR_E)) { return 0; } @@ -54,7 +54,7 @@ int BPF_PROG(socketpair_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(socketpair_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SOCKETPAIR_X_SIZE, PPME_SOCKET_SOCKETPAIR_X)) { + if(!ringbuf__reserve_space(&ringbuf, SOCKETPAIR_X_SIZE, PPME_SOCKET_SOCKETPAIR_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/splice.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/splice.bpf.c index 5498157ed5..99f7ce5144 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/splice.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/splice.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(splice_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SPLICE_E_SIZE, PPME_SYSCALL_SPLICE_E)) { + if(!ringbuf__reserve_space(&ringbuf, SPLICE_E_SIZE, PPME_SYSCALL_SPLICE_E)) { return 0; } @@ -51,7 +51,7 @@ int BPF_PROG(splice_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(splice_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SPLICE_X_SIZE, PPME_SYSCALL_SPLICE_X)) { + if(!ringbuf__reserve_space(&ringbuf, SPLICE_X_SIZE, PPME_SYSCALL_SPLICE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/stat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/stat.bpf.c index d85967434a..a48922b318 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/stat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/stat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(stat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, STAT_E_SIZE, PPME_SYSCALL_STAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, STAT_E_SIZE, PPME_SYSCALL_STAT_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(stat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlink.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlink.bpf.c index f6fd68a290..ff38aa4222 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlink.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlink.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(symlink_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SYMLINK_E_SIZE, PPME_SYSCALL_SYMLINK_E)) { + if(!ringbuf__reserve_space(&ringbuf, SYMLINK_E_SIZE, PPME_SYSCALL_SYMLINK_E)) { return 0; } @@ -61,7 +61,7 @@ int BPF_PROG(symlink_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlinkat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlinkat.bpf.c index 45d94128fc..52d446b3c5 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlinkat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/symlinkat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(symlinkat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, SYMLINKAT_E_SIZE, PPME_SYSCALL_SYMLINKAT_E)) { + if(!ringbuf__reserve_space(&ringbuf, SYMLINKAT_E_SIZE, PPME_SYSCALL_SYMLINKAT_E)) { return 0; } @@ -68,7 +68,7 @@ int BPF_PROG(symlinkat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tgkill.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tgkill.bpf.c index 9affe99d9c..698a4d7201 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tgkill.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tgkill.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(tgkill_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, TGKILL_E_SIZE, PPME_SYSCALL_TGKILL_E)) { + if(!ringbuf__reserve_space(&ringbuf, TGKILL_E_SIZE, PPME_SYSCALL_TGKILL_E)) { return 0; } @@ -47,7 +47,7 @@ int BPF_PROG(tgkill_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(tgkill_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, TGKILL_X_SIZE, PPME_SYSCALL_TGKILL_X)) { + if(!ringbuf__reserve_space(&ringbuf, TGKILL_X_SIZE, PPME_SYSCALL_TGKILL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/timerfd_create.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/timerfd_create.bpf.c index 0e891ac938..1dad343c09 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/timerfd_create.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/timerfd_create.bpf.c @@ -13,10 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(timerfd_create_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - TIMERFD_CREATE_E_SIZE, - PPME_SYSCALL_TIMERFD_CREATE_E)) { + if(!ringbuf__reserve_space(&ringbuf, TIMERFD_CREATE_E_SIZE, PPME_SYSCALL_TIMERFD_CREATE_E)) { return 0; } @@ -46,10 +43,7 @@ int BPF_PROG(timerfd_create_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(timerfd_create_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, - ctx, - TIMERFD_CREATE_X_SIZE, - PPME_SYSCALL_TIMERFD_CREATE_X)) { + if(!ringbuf__reserve_space(&ringbuf, TIMERFD_CREATE_X_SIZE, PPME_SYSCALL_TIMERFD_CREATE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tkill.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tkill.bpf.c index 1cd4e1d7eb..fd72ab0978 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tkill.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/tkill.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(tkill_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, TKILL_E_SIZE, PPME_SYSCALL_TKILL_E)) { + if(!ringbuf__reserve_space(&ringbuf, TKILL_E_SIZE, PPME_SYSCALL_TKILL_E)) { return 0; } @@ -43,7 +43,7 @@ int BPF_PROG(tkill_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(tkill_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, TKILL_X_SIZE, PPME_SYSCALL_TKILL_X)) { + if(!ringbuf__reserve_space(&ringbuf, TKILL_X_SIZE, PPME_SYSCALL_TKILL_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount.bpf.c index d05962c6c0..b13d1ad7be 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(umount_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UMOUNT_E_SIZE, PPME_SYSCALL_UMOUNT_1_E)) { + if(!ringbuf__reserve_space(&ringbuf, UMOUNT_E_SIZE, PPME_SYSCALL_UMOUNT_1_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(umount_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount2.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount2.bpf.c index 8e5f6c1d90..c9afa9f3aa 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount2.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/umount2.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(umount2_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UMOUNT2_E_SIZE, PPME_SYSCALL_UMOUNT2_E)) { + if(!ringbuf__reserve_space(&ringbuf, UMOUNT2_E_SIZE, PPME_SYSCALL_UMOUNT2_E)) { return 0; } @@ -59,7 +59,7 @@ int BPF_PROG(umount2_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlink.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlink.bpf.c index 41cdfdc132..5fddd1f006 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlink.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlink.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(unlink_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UNLINK_E_SIZE, PPME_SYSCALL_UNLINK_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, UNLINK_E_SIZE, PPME_SYSCALL_UNLINK_2_E)) { return 0; } @@ -57,7 +57,7 @@ int BPF_PROG(unlink_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlinkat.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlinkat.bpf.c index eef96a8a52..0a28a69639 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlinkat.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unlinkat.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(unlinkat_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UNLINKAT_E_SIZE, PPME_SYSCALL_UNLINKAT_2_E)) { + if(!ringbuf__reserve_space(&ringbuf, UNLINKAT_E_SIZE, PPME_SYSCALL_UNLINKAT_2_E)) { return 0; } @@ -68,7 +68,7 @@ int BPF_PROG(unlinkat_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unshare.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unshare.bpf.c index f8f2c316b2..863f54d5d7 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unshare.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/unshare.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(unshare_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UNSHARE_E_SIZE, PPME_SYSCALL_UNSHARE_E)) { + if(!ringbuf__reserve_space(&ringbuf, UNSHARE_E_SIZE, PPME_SYSCALL_UNSHARE_E)) { return 0; } @@ -39,7 +39,7 @@ int BPF_PROG(unshare_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(unshare_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, UNSHARE_X_SIZE, PPME_SYSCALL_UNSHARE_X)) { + if(!ringbuf__reserve_space(&ringbuf, UNSHARE_X_SIZE, PPME_SYSCALL_UNSHARE_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/userfaultfd.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/userfaultfd.bpf.c index 6a8830c185..8b433efffb 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/userfaultfd.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/userfaultfd.bpf.c @@ -13,7 +13,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(userfaultfd_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, USERFAULTFD_E_SIZE, PPME_SYSCALL_USERFAULTFD_E)) { + if(!ringbuf__reserve_space(&ringbuf, USERFAULTFD_E_SIZE, PPME_SYSCALL_USERFAULTFD_E)) { return 0; } @@ -37,7 +37,7 @@ int BPF_PROG(userfaultfd_e, struct pt_regs *regs, long id) { SEC("tp_btf/sys_exit") int BPF_PROG(userfaultfd_x, struct pt_regs *regs, long ret) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, USERFAULTFD_X_SIZE, PPME_SYSCALL_USERFAULTFD_X)) { + if(!ringbuf__reserve_space(&ringbuf, USERFAULTFD_X_SIZE, PPME_SYSCALL_USERFAULTFD_X)) { return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c index d6201142eb..8ede844bc1 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/vfork.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(vfork_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, VFORK_E_SIZE, PPME_SYSCALL_VFORK_20_E)) { + if(!ringbuf__reserve_space(&ringbuf, VFORK_E_SIZE, PPME_SYSCALL_VFORK_20_E)) { return 0; } @@ -218,7 +218,7 @@ int BPF_PROG(t2_vfork_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/write.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/write.bpf.c index 45fcfb392c..98ab3c4cdf 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/write.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/write.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(write_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, WRITE_E_SIZE, PPME_SYSCALL_WRITE_E)) { + if(!ringbuf__reserve_space(&ringbuf, WRITE_E_SIZE, PPME_SYSCALL_WRITE_E)) { return 0; } @@ -73,7 +73,7 @@ int BPF_PROG(write_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } diff --git a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/writev.bpf.c b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/writev.bpf.c index ab9fc8ccb6..b77844e28a 100644 --- a/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/writev.bpf.c +++ b/driver/modern_bpf/programs/tail_called/events/syscall_dispatched_events/writev.bpf.c @@ -14,7 +14,7 @@ SEC("tp_btf/sys_enter") int BPF_PROG(writev_e, struct pt_regs *regs, long id) { struct ringbuf_struct ringbuf; - if(!ringbuf__reserve_space(&ringbuf, ctx, WRITEV_E_SIZE, PPME_SYSCALL_WRITEV_E)) { + if(!ringbuf__reserve_space(&ringbuf, WRITEV_E_SIZE, PPME_SYSCALL_WRITEV_E)) { return 0; } @@ -78,7 +78,7 @@ int BPF_PROG(writev_x, struct pt_regs *regs, long ret) { auxmap__finalize_event_header(auxmap); - auxmap__submit_event(auxmap, ctx); + auxmap__submit_event(auxmap); return 0; } From 070cee379a61a34646a8a2642163412e3c66fe19 Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Thu, 7 Nov 2024 10:17:44 +0100 Subject: [PATCH 10/45] cleanup(tests): improve test stability Signed-off-by: Andrea Terzolo --- test/drivers/test_suites/actions_suite/sampling_ratio.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/drivers/test_suites/actions_suite/sampling_ratio.cpp b/test/drivers/test_suites/actions_suite/sampling_ratio.cpp index 6e916b1937..adfcaffda9 100644 --- a/test/drivers/test_suites/actions_suite/sampling_ratio.cpp +++ b/test/drivers/test_suites/actions_suite/sampling_ratio.cpp @@ -276,11 +276,11 @@ TEST(Actions, sampling_ratio_check_DROP_E_DROP_X) { /* Enable all syscalls */ auto evt_test = get_syscall_event_test(); - evt_test->enable_sampling_logic(128); + evt_test->enable_sampling_logic(2); evt_test->enable_capture(); - uint32_t max_events_to_process = 50000; + uint32_t max_events_to_process = 100000; uint32_t events_processed = 0; uint16_t cpu_id = 0; bool drop_e = false; From 8279c1c9638388b35a7cb38dcd2bcefa8bae52c4 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 16 Sep 2024 09:07:48 +0200 Subject: [PATCH 11/45] chore(ci): bumped perf unit tests threshold to 5% (relative) slowdown. Same threshold used for google benchmarks. Signed-off-by: Federico Di Pierro --- .github/workflows/perf.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml index 4b238fd673..59fff0179c 100644 --- a/.github/workflows/perf.yml +++ b/.github/workflows/perf.yml @@ -105,11 +105,11 @@ jobs: # Check will fail if sum of all differences is >= 1%. # But we will always comment with the perf diff from master - - name: Check >= 1% threshold - perf unit tests + - name: Check >= 5% threshold - perf unit tests if: always() run: | sum=$(awk '{sum+=sprintf("%f",$2)}END{printf "%.6f\n",sum}' perf_tests_diff.txt | tr ',' '.') - if (( $(echo "$sum >= 1.0" | bc -l) )); then + if (( $(echo "$sum >= 5.0" | bc -l) )); then exit 1 fi From 377d260b335e928458aaaa77684a9191feda47b7 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Tue, 17 Sep 2024 09:14:37 +0200 Subject: [PATCH 12/45] chore(test/libsinsp_e2e,ci): port libsinsp_e2e tests to use python3. Signed-off-by: Federico Di Pierro --- .github/workflows/e2e_ci.yml | 2 +- .../resources/unix_client_server.py | 17 +++++++---------- test/libsinsp_e2e/unix_client_server.cpp | 6 +++--- 3 files changed, 11 insertions(+), 14 deletions(-) diff --git a/.github/workflows/e2e_ci.yml b/.github/workflows/e2e_ci.yml index 95f7fbcfb2..48fcfc4ad2 100644 --- a/.github/workflows/e2e_ci.yml +++ b/.github/workflows/e2e_ci.yml @@ -147,7 +147,7 @@ jobs: - name: Install deps run: | - sudo apt install -y --no-install-recommends clang gcc llvm build-essential cmake python2 + sudo apt install -y --no-install-recommends clang gcc llvm build-essential cmake python3 quota - name: Install kernel headers (actuated) uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 diff --git a/test/libsinsp_e2e/resources/unix_client_server.py b/test/libsinsp_e2e/resources/unix_client_server.py index f183eaac65..5f0b17cecc 100644 --- a/test/libsinsp_e2e/resources/unix_client_server.py +++ b/test/libsinsp_e2e/resources/unix_client_server.py @@ -1,22 +1,21 @@ -#!/usr/bin/python2 +#!/usr/bin/python3 # coding: utf-8 -*- import socket import os, os.path -import time import sys PAYLOAD = "0123456789QWERTYUIOPASDFGHJKLZXCVBNM" NAME = "/tmp/python_unix_sockets_example" - +STARTED = "STARTED" + if sys.argv[1] == 'server': if os.path.exists(NAME): os.remove(NAME) server = socket.socket( socket.AF_UNIX, socket.SOCK_STREAM ) server.bind(NAME) - sys.stdout = os.fdopen(sys.stdout.fileno(), 'w', 0) - print "STARTED" + print(STARTED) server.listen(5) connect, address = server.accept() @@ -27,17 +26,15 @@ os.remove(NAME) else: - sys.stdout = os.fdopen(sys.stdout.fileno(), 'w', 0) - if os.path.exists(NAME): client = socket.socket( socket.AF_UNIX, socket.SOCK_STREAM ) client.connect(NAME) - print "STARTED" + print(STARTED) - client.send(PAYLOAD) + client.send(PAYLOAD.encode()) resp = client.recv(1024) client.close() else: - print >> sys.stderr, "Couldn't Connect!" + print("Couldn't Connect!", file=sys.stderr) diff --git a/test/libsinsp_e2e/unix_client_server.cpp b/test/libsinsp_e2e/unix_client_server.cpp index 6d4d38004e..a668cb3e8a 100644 --- a/test/libsinsp_e2e/unix_client_server.cpp +++ b/test/libsinsp_e2e/unix_client_server.cpp @@ -90,7 +90,7 @@ TEST_F(sys_call_test, unix_client_server) { event_filter_t filter = [&](sinsp_evt* evt) { sinsp_threadinfo* ti = evt->get_thread_info(false); if(ti) { - if(ti->get_comm() == "python2" && ti->m_args.size() >= 1) { + if(ti->get_comm() == "python3" && ti->m_args.size() >= 1) { return ends_with(ti->m_args[0], "unix_client_server.py") || ends_with(ti->m_args[0], "unix_client_server.py"); } @@ -103,12 +103,12 @@ TEST_F(sys_call_test, unix_client_server) { // INITIALIZATION // run_callback_t test = [](concurrent_object_handle inspector) { - subprocess server("python2", + subprocess server("python3", {LIBSINSP_TEST_RESOURCES_PATH "/unix_client_server.py", "server"}); server.wait_for_start(); - subprocess client("python2", + subprocess client("python3", {LIBSINSP_TEST_RESOURCES_PATH "/unix_client_server.py", "client"}); server.wait(); client.wait(); From e4eea8bc94821d7a1f8d50500087b7b747b2ea12 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Fri, 20 Sep 2024 16:05:44 +0200 Subject: [PATCH 13/45] new(ci): add a zig build job plus a composite action to setup zig. Signed-off-by: Federico Di Pierro --- .github/actions/install-zig/action.yml | 47 ++++++++++++++++++++++++++ .github/workflows/ci.yml | 10 +++++- 2 files changed, 56 insertions(+), 1 deletion(-) create mode 100644 .github/actions/install-zig/action.yml diff --git a/.github/actions/install-zig/action.yml b/.github/actions/install-zig/action.yml new file mode 100644 index 0000000000..e7eb11f98b --- /dev/null +++ b/.github/actions/install-zig/action.yml @@ -0,0 +1,47 @@ +name: 'install-zig' +description: 'Install zig compiler and make it available in PATH.' + +inputs: + sudo: + description: 'Specify a sudo command. Put it empty when sudo is not available.' + required: false + default: 'sudo' + +outputs: + zig_path: + description: "Path of installed zig, automatically added to GITHUB_PATH" + value: ${{ steps.zig.outputs.zig-path }} + +runs: + using: "composite" + steps: + - name: Install zig + shell: bash + id: zig + env: + ZIG_VERSION: '0.14.0-dev.1588+2111f4c38' + run: | + curl -L -o zig.tar.xz https://ziglang.org/builds/zig-linux-$(uname -m)-${ZIG_VERSION}.tar.xz + tar -xvf zig.tar.xz + + cat > zig-linux-$(uname -m)-${ZIG_VERSION}/zig-cc < zig-linux-$(uname -m)-${ZIG_VERSION}/zig-c++ <> $GITHUB_PATH + echo "CC=zig-cc" >> $GITHUB_ENV + echo "CXX=zig-c++" >> $GITHUB_ENV + echo "AR=zig ar" >> $GITHUB_ENV + echo "RANLIB=zig ranlib" >> $GITHUB_ENV + + echo "zig-path=/usr/local/zig/zig-linux-$(uname -m)-${ZIG_VERSION}" >> $GITHUB_OUTPUT diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2957148a63..f94455db46 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,7 +21,7 @@ jobs: fail-fast: false matrix: arch: [amd64, arm64] - name: [system_deps, bundled_deps, system_deps_minimal, sanitizers] + name: [system_deps, bundled_deps, system_deps_minimal, sanitizers, zig] include: - name: system_deps cmake_opts: -DBUILD_WARNINGS_AS_ERRORS=On -DBUILD_BPF=On -DUSE_BUNDLED_DEPS=False @@ -31,6 +31,8 @@ jobs: cmake_opts: -DBUILD_WARNINGS_AS_ERRORS=On -DUSE_BUNDLED_DEPS=False -DMINIMAL_BUILD=True - name: sanitizers cmake_opts: -DUSE_ASAN=On -DUSE_UBSAN=On -DUSE_BUNDLED_DEPS=False + - name: zig + cmake_opts: -DUSE_BUNDLED_DEPS=True container: image: debian:buster steps: @@ -59,6 +61,12 @@ jobs: run: | git config --global --add safe.directory $GITHUB_WORKSPACE + - name: Install zig + if: matrix.name == 'zig' + uses: ./.github/actions/install-zig + with: + sudo: '' + - name: Build and test 🏗️🧪 env: UBSAN_OPTIONS: print_stacktrace=1 From 8b369a2e6d38ea0d310126d50cba35055efd8b18 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 23 Sep 2024 11:01:06 +0200 Subject: [PATCH 14/45] chore(ci): check linked glibc version on zig. Signed-off-by: Federico Di Pierro --- .github/workflows/ci.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f94455db46..beea94ccc3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -76,6 +76,19 @@ jobs: KERNELDIR=/lib/modules/$(ls /lib/modules)/build make -j4 make run-unit-tests + # On zig, build also sinsp-example and check the glibc linked versions + # to make sure we are actually using the correct glibc version. + - name: Test zig build glibc version + if: matrix.name == 'zig' + run: | + cd build + objdump -T libsinsp/test/unit-test-libsinsp | grep -Eo 'GLIBC_\S+' | sort -u -t "." -k1,1n -k2,2n -k3,3n + linked_glibc=$(objdump -T libsinsp/test/unit-test-libsinsp | grep -Eo 'GLIBC_\S+' | sort -u -t "." -k1,1n -k2,2n -k3,3n | tail -n1 | tr -d ')') + if [ "$linked_glibc" != "GLIBC_2.17" ]; then + echo "Expected glibc 2.17; found $linked_glibc" + exit 1 + fi + build-libs-linux-amd64-static: name: build-libs-linux-amd64-static 🎃 runs-on: ubuntu-latest From 768d1b13185be6bbd9cb2d4b07a6f18e45254758 Mon Sep 17 00:00:00 2001 From: Mauro Ezequiel Moltrasio Date: Tue, 1 Oct 2024 12:13:04 +0200 Subject: [PATCH 15/45] chore(ci): show diff on failed format The provided patch is great to fix large formatting errors, however, it would be nice for CI to also show the diff for smaller changes that could be directly typed without having to download the patch. Signed-off-by: Mauro Ezequiel Moltrasio --- .github/workflows/format.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 8432c3abd9..fb555b9020 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -24,7 +24,7 @@ jobs: - name: Run pre-commit ©️ run: | - pre-commit run --all-files + pre-commit run --show-diff-on-failure --color=always --all-files - name: Generate the git-diff 🚒 if: failure() From c4c124a8a840bc90bccb516035a978ac6d61dbd5 Mon Sep 17 00:00:00 2001 From: cpanato Date: Wed, 9 Oct 2024 10:41:20 +0200 Subject: [PATCH 16/45] clean up and update ci Signed-off-by: cpanato --- .github/workflows/ci.yml | 20 +++---- .../create-comment-kernel-testing.yml | 4 +- .github/workflows/driver-api-version.yml | 3 +- .github/workflows/driver-schema-version.yml | 6 +-- .github/workflows/driverkit.yml | 2 +- .github/workflows/drivers_ci.yml | 30 +++++------ .github/workflows/e2e_ci.yml | 10 ++-- .github/workflows/format.yml | 2 +- .github/workflows/latest-kernel.yml | 10 ++-- .github/workflows/pages.yml | 24 ++++----- .github/workflows/perf.yml | 6 +-- .github/workflows/release-body.yml | 54 +++++++++---------- .github/workflows/reusable_kernel_tests.yaml | 10 ++-- .github/workflows/semgrep_checks.yml | 4 +- .github/workflows/test_coverage_ci.yml | 2 +- .github/workflows/update-syscalls.yml | 4 +- 16 files changed, 95 insertions(+), 96 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index beea94ccc3..34cce0d921 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -49,7 +49,7 @@ jobs: rm -rf /tmp/cmake-3.22.5-linux-$(uname -m)/ - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -100,7 +100,7 @@ jobs: apk add g++ gcc cmake make git bash perl linux-headers autoconf automake m4 libtool elfutils-dev libelf-static patch binutils bpftool clang - name: Checkout Libs ⤵️ - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -119,7 +119,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -169,7 +169,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -184,7 +184,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -221,7 +221,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -301,15 +301,15 @@ jobs: sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 - + - name: Fix kernel mmap rnd bits # Asan in llvm 14 provided in ubuntu 22.04 is incompatible with # high-entropy ASLR in much newer kernels that GitHub runners are # using leading to random crashes: https://reviews.llvm.org/D148280 - run: sudo sysctl vm.mmap_rnd_bits=28 + run: sudo sysctl vm.mmap_rnd_bits=28 - name: Install deps ⛓️ run: | @@ -354,7 +354,7 @@ jobs: sudo apt install -y --no-install-recommends ca-certificates cmake build-essential clang-14 llvm-14 git pkg-config autoconf automake libtool libelf-dev libcap-dev linux-headers-$(uname -r) emscripten - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 diff --git a/.github/workflows/create-comment-kernel-testing.yml b/.github/workflows/create-comment-kernel-testing.yml index 60d7a6876a..e7ca7a68bb 100644 --- a/.github/workflows/create-comment-kernel-testing.yml +++ b/.github/workflows/create-comment-kernel-testing.yml @@ -47,14 +47,14 @@ jobs: var fs = require('fs'); var issue_number = Number(fs.readFileSync('./NR')); var comment_body = fs.readFileSync('./COMMENT'); - + // Get the existing comments. const {data: comments} = await github.rest.issues.listComments({ owner: context.repo.owner, repo: context.repo.repo, issue_number: issue_number, }); - + // Find any comment already made by the bot. const botComment = comments.find(comment => comment.user.id === 41898282 && comment.body.includes('# X64 kernel testing matrix')); diff --git a/.github/workflows/driver-api-version.yml b/.github/workflows/driver-api-version.yml index 52d2019a20..6e7eff993b 100644 --- a/.github/workflows/driver-api-version.yml +++ b/.github/workflows/driver-api-version.yml @@ -12,7 +12,6 @@ on: - 'driver/ppm_events_public.h' - 'driver/bpf/maps.h' - 'driver/modern_bpf/maps/maps.h' - jobs: paths-filter: @@ -20,7 +19,7 @@ jobs: outputs: driver_api_changed: ${{ steps.filter.outputs.driver_api }} steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: filter with: diff --git a/.github/workflows/driver-schema-version.yml b/.github/workflows/driver-schema-version.yml index 837064cb5c..a379969425 100644 --- a/.github/workflows/driver-schema-version.yml +++ b/.github/workflows/driver-schema-version.yml @@ -19,7 +19,7 @@ jobs: outputs: driver_schema_changed: ${{ steps.filter.outputs.driver_schema }} steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: filter with: @@ -34,14 +34,14 @@ jobs: needs: paths-filter if: needs.paths-filter.outputs.driver_schema_changed == 'false' steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Check driver SCHEMA_VERSION uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1 with: message: | Please double check **driver/SCHEMA_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#schema-version-number). - + /hold - name: Trigger failure diff --git a/.github/workflows/driverkit.yml b/.github/workflows/driverkit.yml index 651babc71a..26753bf0a4 100644 --- a/.github/workflows/driverkit.yml +++ b/.github/workflows/driverkit.yml @@ -37,7 +37,7 @@ jobs: - name: Test drivers build on ${{ matrix.name }} run: | driverkit docker --kernelrelease ${{ matrix.kernelrelease }} --target ${{ matrix.target }} --output-module /tmp/libs.ko --output-probe /tmp/libs.o --driverversion $GITHUB_SHA --loglevel debug --kernelurls ${{ matrix.kernelurls }} - + build-drivers-arm64: strategy: matrix: diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 953d8312b1..921fab6bca 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -24,7 +24,7 @@ jobs: libscap: ${{ steps.filter.outputs.libscap }} libpman: ${{ steps.filter.outputs.libpman }} steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: filter with: @@ -48,14 +48,14 @@ jobs: - arch: amd64 enable_gvisor: True - arch: amd64 - enable_gvisor: False - fail-fast: false + enable_gvisor: False + fail-fast: false steps: - name: Checkout Libs ⤵️ # We need to skip each step because of https://github.com/orgs/community/discussions/9141. # This avoids having a skipped job whose name is not the resolved matrix name, like "test-scap-${{ matrix.arch }} 😆 (bundled_deps)" if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -73,14 +73,14 @@ jobs: cd src && sudo make install - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 + uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'arm64' - name: Install kernel headers if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'amd64' run: | sudo apt install -y --no-install-recommends linux-headers-$(uname -r) - + - name: Build scap-open and drivers 🏗️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' run: | @@ -125,7 +125,7 @@ jobs: steps: - name: Checkout Libs ⤵️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -143,7 +143,7 @@ jobs: cd src && sudo make install - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 + uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'arm64' - name: Install kernel headers and gcc @@ -175,7 +175,7 @@ jobs: run: | cd build sudo ./test/drivers/drivers_test -k - + test-drivers-ppc64le: name: test-drivers-ppc64le 😁 (system_deps,custom node) runs-on: ubuntu-22.04 @@ -211,7 +211,7 @@ jobs: sudo ./test/drivers/drivers_test -k rc_kmod=$? exit $(($rc_modern + $rc_bpf +$rc_kmod)) - + build-drivers-s390x: name: build-drivers-s390x 😁 (system_deps) runs-on: ubuntu-22.04 @@ -219,7 +219,7 @@ jobs: steps: - name: Checkout Libs ⤵️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -232,7 +232,7 @@ jobs: githubToken: ${{ github.token }} install: | - apt update && apt install -y --no-install-recommends ca-certificates cmake build-essential clang llvm git pkg-config autoconf automake libtool libelf-dev wget libc-ares-dev libcurl4-openssl-dev libssl-dev libtbb-dev libjq-dev libjsoncpp-dev libgrpc++-dev protobuf-compiler-grpc libcap-dev libgtest-dev libprotobuf-dev linux-headers-generic + apt update && apt install -y --no-install-recommends ca-certificates cmake build-essential clang llvm git pkg-config autoconf automake libtool libelf-dev wget libc-ares-dev libcurl4-openssl-dev libssl-dev libtbb-dev libjq-dev libjsoncpp-dev libgrpc++-dev protobuf-compiler-grpc libcap-dev libgtest-dev libprotobuf-dev linux-headers-generic git clone https://github.com/libbpf/bpftool.git --branch v7.3.0 --single-branch cd bpftool git submodule update --init @@ -248,7 +248,7 @@ jobs: mkdir -p build cd build && cmake -DBUILD_WARNINGS_AS_ERRORS=On -DBUILD_BPF=On -DUSE_BUNDLED_DEPS=OFF -DMODERN_PROBE_INCLUDE="-I/usr/include/s390x-linux-gnu" -DBUILD_LIBSCAP_MODERN_BPF=ON -DMODERN_BPF_DEBUG_MODE=ON -DENABLE_DRIVERS_TESTS=On -DCREATE_TEST_TARGETS=On -DBUILD_LIBSCAP_GVISOR=OFF ../ KERNELDIR=/lib/modules/$(ls /lib/modules)/build make driver bpf drivers_test -j6 - + build-modern-bpf-skeleton: needs: paths-filter # See https://github.com/actions/runner/issues/409#issuecomment-1158849936 @@ -280,7 +280,7 @@ jobs: build-scap-open-w-extern-bpf-skeleton: env: ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true - needs: [paths-filter,build-modern-bpf-skeleton] + needs: [paths-filter,build-modern-bpf-skeleton] # See https://github.com/actions/runner/issues/409#issuecomment-1158849936 runs-on: 'ubuntu-latest' if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' @@ -344,7 +344,7 @@ jobs: run: | cd build source /opt/rh/devtoolset-9/enable - make scap-open -j6 + make scap-open -j6 # Only runs on pull request since on master branch it is already triggered by pages CI. kernel-tests-dev: diff --git a/.github/workflows/e2e_ci.yml b/.github/workflows/e2e_ci.yml index 48fcfc4ad2..5a46638b52 100644 --- a/.github/workflows/e2e_ci.yml +++ b/.github/workflows/e2e_ci.yml @@ -22,7 +22,7 @@ jobs: fail-fast: false steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -65,7 +65,7 @@ jobs: cd src && sudo make install - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 + uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 if: matrix.arch == 'arm64' - name: Install kernel headers and gcc @@ -118,7 +118,7 @@ jobs: fail-fast: false steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 @@ -129,7 +129,7 @@ jobs: path: build key: build-e2e-${{ matrix.arch }}-${{ github.run_id }} restore-keys: build-e2e- - + - name: Fix kernel mmap rnd bits # Asan in llvm 14 provided in ubuntu 22.04 is incompatible with # high-entropy ASLR in much newer kernels that GitHub runners are @@ -150,7 +150,7 @@ jobs: sudo apt install -y --no-install-recommends clang gcc llvm build-essential cmake python3 quota - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 + uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 if: matrix.arch == 'arm64' - name: Install kernel headers and gcc diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index fb555b9020..b7e3f5e39f 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout repository 🎉 - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 604a774806..6169c7fa13 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -21,13 +21,13 @@ jobs: run: | apk update && apk add git git clone https://aur.archlinux.org/linux-mainline.git linux/ - + - name: Generate driverkit config id: latest-version # Note: in case we are building latest mainline, # we grep the linux-mainline aur PKGBUILD "_tag" line, that is made like: "_tag=v6.4-rc1" # We then need to extract the part after the "=" and finally remove the starting "v". - run: | + run: | cd linux/ echo "kernelversion: 1" > dk.yaml echo "architecture: amd64" >> dk.yaml @@ -45,19 +45,19 @@ jobs: echo "target: arch" >> dk.yaml fi echo "latest_vers=$(grep kernelrelease dk.yaml | awk -F": " '{print $2}')" >> $GITHUB_OUTPUT - + - name: Upload driverkit config uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: driverkit_config.yaml path: linux/dk.yaml - + - name: Test drivers build id: build run: | echo "Testing build of drivers against: ${{ steps.latest-version.outputs.latest_vers }}" driverkit docker -c linux/dk.yaml -l debug - + - name: Update README badge uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0 if: always() && github.event_name == 'schedule' diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 48fa737f49..79aa83f140 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -2,7 +2,7 @@ name: Deploy Github Pages on: push: branches: [master] - + permissions: contents: read pages: write @@ -21,7 +21,7 @@ jobs: runs-on: [ "self-hosted", "linux", "X64" ] steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Run perf id: perf @@ -41,7 +41,7 @@ jobs: if-no-files-found: error - name: Checkout Flamegraph ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: 'brendangregg/FlameGraph' path: flamegraph @@ -85,24 +85,24 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - name: Download matrix X64 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: matrix_X64 - + - name: Move X64 matrix under docs run: mv matrix.md docs/matrix_X64.md - + - name: Download matrix ARM64 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: matrix_ARM64 - + - name: Move ARM64 matrix under docs - run: mv matrix.md docs/matrix_ARM64.md - + run: mv matrix.md docs/matrix_ARM64.md + - name: Disable Table Of Content for matrixes pages run: | sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/matrix_X64.md @@ -133,9 +133,9 @@ jobs: python-version: 3.x - run: pip install mkdocs mkdocs-material - + - run: mkdocs build - + - uses: actions/upload-pages-artifact@a753861a5debcf57bf8b404356158c8e1e33150c # v2.0.0 with: path: 'site' diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml index 59fff0179c..d5c1ad4180 100644 --- a/.github/workflows/perf.yml +++ b/.github/workflows/perf.yml @@ -13,10 +13,10 @@ jobs: runs-on: [ "self-hosted", "linux", "X64" ] steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Checkout Google benchmark ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: 'google/benchmark' ref: 'v1.9.0' @@ -40,7 +40,7 @@ jobs: - name: Diff from master - perf scap file run: | - sudo perf diff perf_scap.data ${{ steps.perf.outputs.perf_scap }} -d sinsp-example -b -o 1 --percentage relative -q &> perf_scap_diff.txt + sudo perf diff perf_scap.data ${{ steps.perf.outputs.perf_scap }} -d sinsp-example -b -o 1 --percentage relative -q &> perf_scap_diff.txt - name: Diff from master - heaptrack unit tests run: | diff --git a/.github/workflows/release-body.yml b/.github/workflows/release-body.yml index 8dfb4999bb..de50271ff1 100644 --- a/.github/workflows/release-body.yml +++ b/.github/workflows/release-body.yml @@ -43,13 +43,13 @@ jobs: # Safeguard: you need to both set "latest" in GH and not have suffixes to overwrite latest is_latest = '${{ steps.latest_release.outputs.release }}' == tag_name and not is_prerelease - + is_driver = "+driver" in tag_name with open(os.environ['GITHUB_OUTPUT'], 'a') as ofp: print(f'is_latest={is_latest}'.lower(), file=ofp) print(f'is_driver={is_driver}'.lower(), file=ofp) - + release-body-libs: needs: [release-settings] if: ${{ needs.release-settings.outputs.is_latest == 'true' && needs.release-settings.outputs.is_driver == 'false' }} # only for latest releases and not driver ones @@ -58,12 +58,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone repo - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - name: Create release body file run: | touch release-body.md - + - name: Extract MIN_API version run: | MIN_API_VER=$(grep SCAP_MINIMUM_DRIVER_API_VERSION userspace/libscap/scap.h) @@ -72,7 +72,7 @@ jobs: MIN_API_VER=$(echo $MIN_API_VER | tr -d "(" | tr -d ")") MIN_API_VER=$(echo $MIN_API_VER | sed -r 's/, /./g') echo '!'"[MIN_DRIVER_API](https://img.shields.io/badge/MIN_DRIVER_API-${MIN_API_VER}-yellow)" >> release-body.md - + - name: Extract MIN_SCHEMA version run: | MIN_SCHEMA_VER=$(grep SCAP_MINIMUM_DRIVER_SCHEMA_VERSION userspace/libscap/scap.h) @@ -82,36 +82,36 @@ jobs: MIN_SCHEMA_VER=$(echo $MIN_SCHEMA_VER | sed -r 's/, /./g') echo '!'"[MIN_DRIVER_SCHEMA](https://img.shields.io/badge/MIN_DRIVER_SCHEMA-${MIN_SCHEMA_VER}-yellow)" >> release-body.md echo "" >> release-body.md - + - name: Generate release notes uses: leodido/rn2md@9c351d81278644c0e17b1ca68edbdba305276c73 with: milestone: ${{ github.event.release.tag_name }} output: ./notes.md - + - name: Merge release notes to pre existent body run: cat notes.md >> release-body.md - + - name: Attach release creator to release body run: | echo "" >> release-body.md echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - + - name: Release uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 with: body_path: ./release-body.md tag_name: ${{ github.event.release.tag_name }} - name: ${{ github.event.release.name }} + name: ${{ github.event.release.name }} kernel-tests-release: needs: [release-settings] - if: ${{ needs.release-settings.outputs.is_latest == 'true' && needs.release-settings.outputs.is_driver == 'true' }} # only for latest driver releases + if: ${{ needs.release-settings.outputs.is_latest == 'true' && needs.release-settings.outputs.is_driver == 'true' }} # only for latest driver releases uses: ./.github/workflows/reusable_kernel_tests.yaml with: libsversion: ${{ github.event.release.tag_name }} - secrets: inherit - + secrets: inherit + release-body-driver: needs: [release-settings, kernel-tests-release] if: ${{ needs.release-settings.outputs.is_latest == 'true' && needs.release-settings.outputs.is_driver == 'true' }} # only for latest driver releases @@ -120,12 +120,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone libs repo - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - name: Create release body file run: | - touch release-body.md - + touch release-body.md + - name: Extract API and SCHEMA versions run: | touch release-body.md @@ -134,20 +134,20 @@ jobs: echo '!'"[API](https://img.shields.io/badge/API-${API_VERS}-yellow)" >> release-body.md echo '!'"[SCHEMA](https://img.shields.io/badge/SCHEMA-${SCHEMA_VERS}-yellow)" >> release-body.md echo "" >> release-body.md - + - name: Download matrix X64 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: matrix_X64 - + - name: Rename X64 matrix run: mv matrix.md matrix_X64.md - + - name: Download matrix ARM64 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: matrix_ARM64 - + - name: Rename ARM64 matrix run: mv matrix.md matrix_ARM64.md @@ -166,20 +166,20 @@ jobs: sed -i '1s/^/# Driver Testing Matrix amd64\n\n/' matrix_X64.md sed -i '1s/^/# Driver Testing Matrix arm64\n\n/' matrix_ARM64.md cat matrix_X64.md matrix_ARM64.md >> release-body.md - + - name: Generate release notes - uses: leodido/rn2md@9c351d81278644c0e17b1ca68edbdba305276c73 + uses: leodido/rn2md@9c351d81278644c0e17b1ca68edbdba305276c73 # main with: milestone: ${{ github.event.release.tag_name }} output: ./notes.md - + - name: Merge release notes to pre existent body run: cat notes.md >> release-body.md - + - name: Attach release creator to release body run: | echo "" >> release-body.md - echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md + echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - name: Release uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 diff --git a/.github/workflows/reusable_kernel_tests.yaml b/.github/workflows/reusable_kernel_tests.yaml index 9139af94dc..dc425829a1 100644 --- a/.github/workflows/reusable_kernel_tests.yaml +++ b/.github/workflows/reusable_kernel_tests.yaml @@ -13,7 +13,7 @@ on: type: string required: false default: 'falcosecurity/libs' - workflow_call: + workflow_call: inputs: libsversion: description: 'libs version to be tested, eg: master' @@ -29,16 +29,16 @@ on: concurrency: group: kernel-tests cancel-in-progress: false - + jobs: test-kernels: strategy: fail-fast: false matrix: architecture: [X64, ARM64] - runs-on: [ "self-hosted", "linux", "${{matrix.architecture}}" ] + runs-on: [ "self-hosted", "linux", "${{matrix.architecture}}" ] steps: - - uses: falcosecurity/kernel-testing@v0.3.2 + - uses: falcosecurity/kernel-testing@f8f0b498e3d2b08e70b8e82f55447ff84f9c43b2 # v0.3.2 id: kernel_tests with: libsversion: ${{ inputs.libsversion }} @@ -49,7 +49,7 @@ jobs: with: name: ansible_output_${{matrix.architecture}} path: ${{ steps.kernel_tests.outputs.ansible_output }} - + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: matrix_${{matrix.architecture}} diff --git a/.github/workflows/semgrep_checks.yml b/.github/workflows/semgrep_checks.yml index 7bdd9f8b75..47c8cd9beb 100644 --- a/.github/workflows/semgrep_checks.yml +++ b/.github/workflows/semgrep_checks.yml @@ -14,7 +14,7 @@ jobs: image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 - name: Scan PR for insecure API usage 🕵️ @@ -32,7 +32,7 @@ jobs: image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 - name: Scan PR for libs relateive include paths 🕵️ diff --git a/.github/workflows/test_coverage_ci.yml b/.github/workflows/test_coverage_ci.yml index 4127779459..5d51457a9d 100644 --- a/.github/workflows/test_coverage_ci.yml +++ b/.github/workflows/test_coverage_ci.yml @@ -27,7 +27,7 @@ jobs: gpg gpg-agent gcovr - name: Checkout Libs ⤵️ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 diff --git a/.github/workflows/update-syscalls.yml b/.github/workflows/update-syscalls.yml index 53482c893f..cd81b2a484 100644 --- a/.github/workflows/update-syscalls.yml +++ b/.github/workflows/update-syscalls.yml @@ -13,13 +13,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: master path: libs - name: Bump syscalls - uses: falcosecurity/syscalls-bumper@main + uses: falcosecurity/syscalls-bumper@main # should be pointing to main with: repo-root: ${{ github.workspace }}/libs From cfe3daeea930deba61aaf05fe4cc6b44831acdfe Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:28 +0000 Subject: [PATCH 17/45] chore(deps): Bump the actions group with 5 updates Bumps the actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [mshick/add-pr-comment](https://github.com/mshick/add-pr-comment) | `2.8.1` | `2.8.2` | | [appleboy/ssh-action](https://github.com/appleboy/ssh-action) | `1.0.3` | `1.1.0` | | [uraimo/run-on-arch-action](https://github.com/uraimo/run-on-arch-action) | `2.5.1` | `2.7.2` | | [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) | `0.0.4` | `0.0.6` | | [actions/cache](https://github.com/actions/cache) | `4.0.2` | `4.1.1` | Updates `mshick/add-pr-comment` from 2.8.1 to 2.8.2 - [Release notes](https://github.com/mshick/add-pr-comment/releases) - [Commits](https://github.com/mshick/add-pr-comment/compare/7c0890544fb33b0bdd2e59467fbacb62e028a096...b8f338c590a895d50bcbfa6c5859251edc8952fc) Updates `appleboy/ssh-action` from 1.0.3 to 1.1.0 - [Release notes](https://github.com/appleboy/ssh-action/releases) - [Changelog](https://github.com/appleboy/ssh-action/blob/master/.goreleaser.yaml) - [Commits](https://github.com/appleboy/ssh-action/compare/029f5b4aeeeb58fdfe1410a5d17f967dacf36262...25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1) Updates `uraimo/run-on-arch-action` from 2.5.1 to 2.7.2 - [Release notes](https://github.com/uraimo/run-on-arch-action/releases) - [Commits](https://github.com/uraimo/run-on-arch-action/compare/4ed76f16f09d12e83abd8a49e1ac1e5bf08784d4...b0ffb25eb00af00468375982384441f063da1741) Updates `mozilla-actions/sccache-action` from 0.0.4 to 0.0.6 - [Release notes](https://github.com/mozilla-actions/sccache-action/releases) - [Commits](https://github.com/mozilla-actions/sccache-action/compare/2e7f9ec7921547d4b46598398ca573513895d0bd...9e326ebed976843c9932b3aa0e021c6f50310eb4) Updates `actions/cache` from 4.0.2 to 4.1.1 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0c45773b623bea8c8e75f6c82b208c3cf94ea4f9...3624ceb22c1c5a301c8db4169662070a689d9ea8) --- updated-dependencies: - dependency-name: mshick/add-pr-comment dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: appleboy/ssh-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: uraimo/run-on-arch-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: mozilla-actions/sccache-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/driver-api-version.yml | 2 +- .github/workflows/driver-schema-version.yml | 2 +- .github/workflows/drivers_ci.yml | 4 ++-- .github/workflows/e2e_ci.yml | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/driver-api-version.yml b/.github/workflows/driver-api-version.yml index 6e7eff993b..03141dad73 100644 --- a/.github/workflows/driver-api-version.yml +++ b/.github/workflows/driver-api-version.yml @@ -35,7 +35,7 @@ jobs: if: needs.paths-filter.outputs.driver_api_changed == 'false' steps: - name: Check driver API_VERSION - uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1 + uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2 with: message: | Please double check **driver/API_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#api-version-number). diff --git a/.github/workflows/driver-schema-version.yml b/.github/workflows/driver-schema-version.yml index a379969425..a19dc23adc 100644 --- a/.github/workflows/driver-schema-version.yml +++ b/.github/workflows/driver-schema-version.yml @@ -37,7 +37,7 @@ jobs: - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Check driver SCHEMA_VERSION - uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1 + uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2 with: message: | Please double check **driver/SCHEMA_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#schema-version-number). diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 921fab6bca..fa78e05f8e 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -189,7 +189,7 @@ jobs: - name: Build and test drivers on ppc64le node via ssh if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: appleboy/ssh-action@029f5b4aeeeb58fdfe1410a5d17f967dacf36262 # v1.0.3 + uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1 # v1.1.0 with: host: ${{ secrets.PPC64LE_HOST }} username: ${{ secrets.PPC64LE_USERNAME }} @@ -223,7 +223,7 @@ jobs: with: fetch-depth: 0 - - uses: uraimo/run-on-arch-action@4ed76f16f09d12e83abd8a49e1ac1e5bf08784d4 # v2.5.1 + - uses: uraimo/run-on-arch-action@b0ffb25eb00af00468375982384441f063da1741 # v2.7.2 name: Run s390x build 🏗️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' with: diff --git a/.github/workflows/e2e_ci.yml b/.github/workflows/e2e_ci.yml index 5a46638b52..badb954d22 100644 --- a/.github/workflows/e2e_ci.yml +++ b/.github/workflows/e2e_ci.yml @@ -74,7 +74,7 @@ jobs: sudo apt install -y --no-install-recommends linux-headers-$(uname -r) gcc-multilib g++-multilib - name: Run sccache-cache - uses: mozilla-actions/sccache-action@2e7f9ec7921547d4b46598398ca573513895d0bd # v0.0.4 + uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6 - name: Build e2e tests 🏗️ env: @@ -100,7 +100,7 @@ jobs: cd .. - name: Cache build - uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + uses: actions/cache/save@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 if: always() id: cache with: @@ -124,7 +124,7 @@ jobs: - name: Restore build id: cache - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: build key: build-e2e-${{ matrix.arch }}-${{ github.run_id }} From 0ade1df05e4ba33544c8913b6534fb4a32a02c02 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:35 +0000 Subject: [PATCH 18/45] chore(deps): Bump codecov/codecov-action Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 79066c46f8dcdf8d7355f820dbac958c5b4cb9d3 to e28ff129e5465c2c0dcc6f003fc735cb6ae0c673. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/79066c46f8dcdf8d7355f820dbac958c5b4cb9d3...e28ff129e5465c2c0dcc6f003fc735cb6ae0c673) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/test_coverage_ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test_coverage_ci.yml b/.github/workflows/test_coverage_ci.yml index 5d51457a9d..6b51bb0190 100644 --- a/.github/workflows/test_coverage_ci.yml +++ b/.github/workflows/test_coverage_ci.yml @@ -51,7 +51,7 @@ jobs: gcovr --xml -o ./libsinsp.coverage.xml - name: Upload to codecov - uses: codecov/codecov-action@79066c46f8dcdf8d7355f820dbac958c5b4cb9d3 # v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0 with: fail_ci_if_error: true files: ./libsinsp.coverage.xml From 8cdf9f0952c5185ec0967e6b7a18fb51671341bd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:39 +0000 Subject: [PATCH 19/45] chore(deps): Bump dorny/paths-filter from 2.11.1 to 3.0.2 Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 2.11.1 to 3.0.2. - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/4512585405083f25c027a35db413c2b3b9006d50...de90cc6fb38fc0963ad72b210f1f284cd68cea36) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/driver-api-version.yml | 2 +- .github/workflows/driver-schema-version.yml | 2 +- .github/workflows/drivers_ci.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/driver-api-version.yml b/.github/workflows/driver-api-version.yml index 03141dad73..04bddc76bc 100644 --- a/.github/workflows/driver-api-version.yml +++ b/.github/workflows/driver-api-version.yml @@ -20,7 +20,7 @@ jobs: driver_api_changed: ${{ steps.filter.outputs.driver_api }} steps: - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: filters: | diff --git a/.github/workflows/driver-schema-version.yml b/.github/workflows/driver-schema-version.yml index a19dc23adc..fc6ec369c2 100644 --- a/.github/workflows/driver-schema-version.yml +++ b/.github/workflows/driver-schema-version.yml @@ -20,7 +20,7 @@ jobs: driver_schema_changed: ${{ steps.filter.outputs.driver_schema }} steps: - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: filters: | diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index fa78e05f8e..4b59dafb0c 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -25,7 +25,7 @@ jobs: libpman: ${{ steps.filter.outputs.libpman }} steps: - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: filters: | From adc163020d31bd024f3e8ddfe238283578f4fb5b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:41 +0000 Subject: [PATCH 20/45] chore(deps): Bump actions/setup-python from 4.7.1 to 5.2.0 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.7.1 to 5.2.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236...f677139bbe7f9c59b41e40162b753c062f5d49a3) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/pages.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 79aa83f140..330a017f6d 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -128,7 +128,7 @@ jobs: echo '' > docs/heaptrack_scap_file.md sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/heaptrack_scap_file.md - - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 + - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0 with: python-version: 3.x From 406c6adf025225662f592616b9e51a56b7008cf3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:47 +0000 Subject: [PATCH 21/45] chore(deps): Bump actions/upload-pages-artifact from 2.0.0 to 3.0.1 Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 2.0.0 to 3.0.1. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/a753861a5debcf57bf8b404356158c8e1e33150c...56afc609e74202658d3ffba0e8f6dda462b719fa) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/pages.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 330a017f6d..c9c7ba8a3c 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -136,7 +136,7 @@ jobs: - run: mkdocs build - - uses: actions/upload-pages-artifact@a753861a5debcf57bf8b404356158c8e1e33150c # v2.0.0 + - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1 with: path: 'site' From 45a63b09709038414f187b76e5674eeb1eb90a25 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:46 +0000 Subject: [PATCH 22/45] chore(deps): Bump peter-evans/create-pull-request from 5.0.2 to 7.0.5 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5.0.2 to 7.0.5. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/153407881ec5c347639a548ade7d8ad1d6740e38...5e914681df9dc83aa4e4905692ca88beb2f9e91f) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/update-syscalls.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/update-syscalls.yml b/.github/workflows/update-syscalls.yml index cd81b2a484..b5d487552b 100644 --- a/.github/workflows/update-syscalls.yml +++ b/.github/workflows/update-syscalls.yml @@ -24,7 +24,7 @@ jobs: repo-root: ${{ github.workspace }}/libs - name: Create Pull Request - uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2 + uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 with: path: libs signoff: true From 0d1ab8702de5312c3fffde9cc11a88746ca771f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:49 +0000 Subject: [PATCH 23/45] chore(deps): Bump actions/deploy-pages from 2.0.4 to 4.0.5 Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 2.0.4 to 4.0.5. - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/9dbe3824824f8a1377b8e298bafde1a50ede43e5...d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/pages.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index c9c7ba8a3c..a40a5909f7 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -141,4 +141,4 @@ jobs: path: 'site' - id: deployment - uses: actions/deploy-pages@9dbe3824824f8a1377b8e298bafde1a50ede43e5 # v2.0.4 \ No newline at end of file + uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 \ No newline at end of file From a3b75459cc406d3c8918988544f4a2fe51737fc4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:33 +0000 Subject: [PATCH 24/45] chore(deps): Bump actions/upload-artifact from 3.1.3 to 4.4.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.4.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v3.1.3...84480863f228bb9747b473957fcc9e309aa96097) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/drivers_ci.yml | 4 ++-- .github/workflows/format.yml | 2 +- .github/workflows/latest-kernel.yml | 2 +- .github/workflows/pages.yml | 4 ++-- .github/workflows/perf.yml | 4 ++-- .github/workflows/reusable_kernel_tests.yaml | 4 ++-- 7 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 34cce0d921..741978f5ed 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -337,7 +337,7 @@ jobs: sudo -E ../test/e2e/scripts/run_tests.sh - name: Archive test reports - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 if: failure() with: name: ${{ matrix.name }}_report diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 4b59dafb0c..ab9f116e76 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -271,7 +271,7 @@ jobs: make ProbeSkeleton -j6 - name: Upload skeleton - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: bpf_probe_x86_64.skel.h path: skeleton-build/skel_dir/bpf_probe.skel.h @@ -392,7 +392,7 @@ jobs: echo "" - name: Upload PR info as artifact - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4 with: name: pr-kernel-testing path: pr/ diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index b7e3f5e39f..6229ae0fcb 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -32,7 +32,7 @@ jobs: - name: Upload the git diff artifact 📦 if: failure() - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: format_diff.patch path: ./format_diff.patch diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 6169c7fa13..bb240d585c 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -47,7 +47,7 @@ jobs: echo "latest_vers=$(grep kernelrelease dk.yaml | awk -F": " '{print $2}')" >> $GITHUB_OUTPUT - name: Upload driverkit config - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: driverkit_config.yaml path: linux/dk.yaml diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index a40a5909f7..d253f64439 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -28,7 +28,7 @@ jobs: uses: ./.github/actions/composite-perf - name: Archive master perf report - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: perf_report retention-days: 30 # 30 days because this is the artifact on master; we need to retain it to be able to properly diff it @@ -72,7 +72,7 @@ jobs: rm -rf stacks.txt - name: Upload svg files - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: perf_svg path: '*.svg' diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml index d5c1ad4180..49d869ec42 100644 --- a/.github/workflows/perf.yml +++ b/.github/workflows/perf.yml @@ -56,7 +56,7 @@ jobs: python3 google-benchmark/tools/compare.py --no-color benchmarks gbench_data.json ${{ steps.perf.outputs.gbench_json }} &> gbench_diff.txt - name: Archive perf diff - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: perf_diff path: '*_diff.txt' @@ -96,7 +96,7 @@ jobs: echo "" - name: Upload PR info as artifact - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4 + uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4 with: name: pr-perf path: pr/ diff --git a/.github/workflows/reusable_kernel_tests.yaml b/.github/workflows/reusable_kernel_tests.yaml index dc425829a1..051ecb2518 100644 --- a/.github/workflows/reusable_kernel_tests.yaml +++ b/.github/workflows/reusable_kernel_tests.yaml @@ -45,12 +45,12 @@ jobs: libsrepo: ${{ inputs.libsrepo }} build_matrix: 'true' - - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: ansible_output_${{matrix.architecture}} path: ${{ steps.kernel_tests.outputs.ansible_output }} - - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 with: name: matrix_${{matrix.architecture}} path: ${{ steps.kernel_tests.outputs.matrix_output }} From 697c0b2fb82eac0b13262983e40d68108375458d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 10 Oct 2024 07:14:15 +0000 Subject: [PATCH 25/45] chore(deps): Bump actions/checkout from 3.6.0 to 4.2.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.2.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.6.0...eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/drivers_ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index ab9f116e76..c99def1275 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -262,7 +262,7 @@ jobs: dnf install -y bpftool ca-certificates cmake make automake gcc gcc-c++ kernel-devel clang git pkg-config autoconf automake libbpf-devel - name: Checkout - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build modern BPF skeleton run: | @@ -311,7 +311,7 @@ jobs: - name: Checkout # It is not possible to upgrade the checkout action to versions >= v4.0.0 because of incompatibilities with centos 7's libc. - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download skeleton uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 From 66d9dcb1f11975b1652363ee31865bf78b8a8a6f Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 10 Oct 2024 13:52:44 +0200 Subject: [PATCH 26/45] fix(ci): fix kernel testing action by using proper tag name. Signed-off-by: Federico Di Pierro --- .github/workflows/reusable_kernel_tests.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/reusable_kernel_tests.yaml b/.github/workflows/reusable_kernel_tests.yaml index 051ecb2518..27272f839b 100644 --- a/.github/workflows/reusable_kernel_tests.yaml +++ b/.github/workflows/reusable_kernel_tests.yaml @@ -38,7 +38,9 @@ jobs: architecture: [X64, ARM64] runs-on: [ "self-hosted", "linux", "${{matrix.architecture}}" ] steps: - - uses: falcosecurity/kernel-testing@f8f0b498e3d2b08e70b8e82f55447ff84f9c43b2 # v0.3.2 + # We need to use v0.3.2 instead of the hash because the tagname is + # used by the action to download release tagged images. + - uses: falcosecurity/kernel-testing@v0.3.2 id: kernel_tests with: libsversion: ${{ inputs.libsversion }} From eaa816dbeeb817d342d77e5b4f26bc507e48a0e2 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 10 Oct 2024 15:14:08 +0200 Subject: [PATCH 27/45] fix(ci): fixed build-scap-open-w-extern-bpf-skeleton: we do not rely on centos7 anymore. Signed-off-by: Federico Di Pierro --- .github/workflows/drivers_ci.yml | 38 +++++--------------------------- 1 file changed, 5 insertions(+), 33 deletions(-) diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index c99def1275..04a382428b 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -281,36 +281,18 @@ jobs: env: ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true needs: [paths-filter,build-modern-bpf-skeleton] - # See https://github.com/actions/runner/issues/409#issuecomment-1158849936 runs-on: 'ubuntu-latest' if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - container: centos:7 steps: - # Always install deps before invoking checkout action, to properly perform a full clone. - - name: Fix mirrors to use vault.centos.org - run: | - sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo - sed -i s/^#.*baseurl=http/baseurl=https/g /etc/yum.repos.d/*.repo - sed -i s/^mirrorlist=http/#mirrorlist=https/g /etc/yum.repos.d/*.repo - - - name: Install scl repos - run: | - yum -y install centos-release-scl - - - name: Fix new mirrors to use vault.centos.org - run: | - sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo - sed -i s/^#.*baseurl=http/baseurl=https/g /etc/yum.repos.d/*.repo - sed -i s/^mirrorlist=http/#mirrorlist=https/g /etc/yum.repos.d/*.repo - - name: Install build dependencies run: | - yum -y install devtoolset-9-gcc devtoolset-9-gcc-c++ - source /opt/rh/devtoolset-9/enable - yum install -y wget git make m4 rpm-build perl-IPC-Cmd + sudo apt update + sudo apt install -y --no-install-recommends ca-certificates cmake build-essential clang-14 llvm-14 git pkg-config autoconf automake libtool libelf-dev libcap-dev + sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-14 90 + sudo update-alternatives --install /usr/bin/llvm-strip llvm-strip /usr/bin/llvm-strip-14 90 + sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 - name: Checkout - # It is not possible to upgrade the checkout action to versions >= v4.0.0 because of incompatibilities with centos 7's libc. uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download skeleton @@ -319,18 +301,9 @@ jobs: name: bpf_probe_x86_64.skel.h path: /tmp - - name: Install updated cmake - run: | - curl -L -o /tmp/cmake.tar.gz https://github.com/Kitware/CMake/releases/download/v3.22.5/cmake-3.22.5-linux-$(uname -m).tar.gz - gzip -d /tmp/cmake.tar.gz - tar -xpf /tmp/cmake.tar --directory=/tmp - cp -R /tmp/cmake-3.22.5-linux-$(uname -m)/* /usr - rm -rf /tmp/cmake-3.22.5-linux-$(uname -m) - - name: Prepare project run: | mkdir build && cd build - source /opt/rh/devtoolset-9/enable cmake \ -DCMAKE_BUILD_TYPE=Release \ -DUSE_BUNDLED_DEPS=On \ @@ -343,7 +316,6 @@ jobs: - name: Build project run: | cd build - source /opt/rh/devtoolset-9/enable make scap-open -j6 # Only runs on pull request since on master branch it is already triggered by pages CI. From d0c4f582b52f0645f7ba7b555c8d0bc55fdee2de Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 10 Oct 2024 15:25:33 +0200 Subject: [PATCH 28/45] chore(ci): bump actions/download-artifact to latest release (v4.1.8). Signed-off-by: Federico Di Pierro --- .github/workflows/drivers_ci.yml | 6 +++--- .github/workflows/pages.yml | 6 +++--- .github/workflows/release-body.yml | 4 ++-- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 04a382428b..eab75e192a 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -296,7 +296,7 @@ jobs: uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download skeleton - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: bpf_probe_x86_64.skel.h path: /tmp @@ -338,13 +338,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Download X64 matrix - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_X64 path: matrix_X64 - name: Download ARM64 matrix - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_ARM64 path: matrix_ARM64 diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index d253f64439..14afb9f704 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -88,7 +88,7 @@ jobs: - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download matrix X64 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_X64 @@ -96,7 +96,7 @@ jobs: run: mv matrix.md docs/matrix_X64.md - name: Download matrix ARM64 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_ARM64 @@ -109,7 +109,7 @@ jobs: sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/matrix_ARM64.md - name: Download perf svg files - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: perf_svg diff --git a/.github/workflows/release-body.yml b/.github/workflows/release-body.yml index de50271ff1..f167a4269d 100644 --- a/.github/workflows/release-body.yml +++ b/.github/workflows/release-body.yml @@ -136,7 +136,7 @@ jobs: echo "" >> release-body.md - name: Download matrix X64 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_X64 @@ -144,7 +144,7 @@ jobs: run: mv matrix.md matrix_X64.md - name: Download matrix ARM64 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: matrix_ARM64 From 8d752c88d6028d5177db646970050f0e99b95b2b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Oct 2024 10:29:05 +0000 Subject: [PATCH 29/45] chore(deps): Bump the actions group with 2 updates Bumps the actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `actions/upload-artifact` from 4.4.2 to 4.4.3 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/84480863f228bb9747b473957fcc9e309aa96097...b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882) Updates `codecov/codecov-action` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/e28ff129e5465c2c0dcc6f003fc735cb6ae0c673...b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/drivers_ci.yml | 4 ++-- .github/workflows/format.yml | 2 +- .github/workflows/latest-kernel.yml | 2 +- .github/workflows/pages.yml | 4 ++-- .github/workflows/perf.yml | 4 ++-- .github/workflows/reusable_kernel_tests.yaml | 4 ++-- .github/workflows/test_coverage_ci.yml | 2 +- 8 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 741978f5ed..9fa6b4bb55 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -337,7 +337,7 @@ jobs: sudo -E ../test/e2e/scripts/run_tests.sh - name: Archive test reports - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: failure() with: name: ${{ matrix.name }}_report diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index eab75e192a..efc1e0d033 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -271,7 +271,7 @@ jobs: make ProbeSkeleton -j6 - name: Upload skeleton - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: bpf_probe_x86_64.skel.h path: skeleton-build/skel_dir/bpf_probe.skel.h @@ -364,7 +364,7 @@ jobs: echo "" - name: Upload PR info as artifact - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 with: name: pr-kernel-testing path: pr/ diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 6229ae0fcb..35e68b4d63 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -32,7 +32,7 @@ jobs: - name: Upload the git diff artifact 📦 if: failure() - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: format_diff.patch path: ./format_diff.patch diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index bb240d585c..8be0427f31 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -47,7 +47,7 @@ jobs: echo "latest_vers=$(grep kernelrelease dk.yaml | awk -F": " '{print $2}')" >> $GITHUB_OUTPUT - name: Upload driverkit config - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: driverkit_config.yaml path: linux/dk.yaml diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 14afb9f704..474833e2d4 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -28,7 +28,7 @@ jobs: uses: ./.github/actions/composite-perf - name: Archive master perf report - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: perf_report retention-days: 30 # 30 days because this is the artifact on master; we need to retain it to be able to properly diff it @@ -72,7 +72,7 @@ jobs: rm -rf stacks.txt - name: Upload svg files - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: perf_svg path: '*.svg' diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml index 49d869ec42..4ff78d5007 100644 --- a/.github/workflows/perf.yml +++ b/.github/workflows/perf.yml @@ -56,7 +56,7 @@ jobs: python3 google-benchmark/tools/compare.py --no-color benchmarks gbench_data.json ${{ steps.perf.outputs.gbench_json }} &> gbench_diff.txt - name: Archive perf diff - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: perf_diff path: '*_diff.txt' @@ -96,7 +96,7 @@ jobs: echo "" - name: Upload PR info as artifact - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 with: name: pr-perf path: pr/ diff --git a/.github/workflows/reusable_kernel_tests.yaml b/.github/workflows/reusable_kernel_tests.yaml index 27272f839b..94edc6a88f 100644 --- a/.github/workflows/reusable_kernel_tests.yaml +++ b/.github/workflows/reusable_kernel_tests.yaml @@ -47,12 +47,12 @@ jobs: libsrepo: ${{ inputs.libsrepo }} build_matrix: 'true' - - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: ansible_output_${{matrix.architecture}} path: ${{ steps.kernel_tests.outputs.ansible_output }} - - uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2 + - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: matrix_${{matrix.architecture}} path: ${{ steps.kernel_tests.outputs.matrix_output }} diff --git a/.github/workflows/test_coverage_ci.yml b/.github/workflows/test_coverage_ci.yml index 6b51bb0190..3c14b362c5 100644 --- a/.github/workflows/test_coverage_ci.yml +++ b/.github/workflows/test_coverage_ci.yml @@ -51,7 +51,7 @@ jobs: gcovr --xml -o ./libsinsp.coverage.xml - name: Upload to codecov - uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0 + uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0 with: fail_ci_if_error: true files: ./libsinsp.coverage.xml From 0fb3d13e8ce237e33c0a825fa689794d43eddf7c Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Wed, 16 Oct 2024 10:37:19 +0200 Subject: [PATCH 30/45] new(ci): run latest-kernel CI against arm64 too. Signed-off-by: Federico Di Pierro --- .github/workflows/latest-kernel.yml | 69 ++++++++++++++++++++++++----- 1 file changed, 57 insertions(+), 12 deletions(-) diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 8be0427f31..4be8b123cb 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -11,15 +11,13 @@ on: - cron: '0 8 * * *' # every day at 8am jobs: - build-latest-kernel: - name: build-latest-kernel - runs-on: ubuntu-latest - container: - image: falcosecurity/driverkit:latest + compute-latest-version: + outputs: + latest_vers: ${{ steps.latest-version.latest_vers }} + runs-on: 'ubuntu-latest' steps: - name: Checkout Archlinux mainline package ⤵️ run: | - apk update && apk add git git clone https://aur.archlinux.org/linux-mainline.git linux/ - name: Generate driverkit config @@ -30,7 +28,6 @@ jobs: run: | cd linux/ echo "kernelversion: 1" > dk.yaml - echo "architecture: amd64" >> dk.yaml echo "driverversion: ${{ github.sha }}" >> dk.yaml echo "output:" >> dk.yaml echo " module: mod.ko" >> dk.yaml @@ -52,19 +49,67 @@ jobs: name: driverkit_config.yaml path: linux/dk.yaml + build-latest-kernel-amd64: + needs: 'compute-latest-version' + outputs: + build: ${{ steps.build.outcome }} + runs-on: 'ubuntu-latest' + steps: + - name: Download driverkit config + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + with: + name: driverkit_config.yaml + + - name: Download latest driverkit artifact + uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6 + with: + name: driverkit-amd64 + workflow: release.yml + repo: falcosecurity/driverkit + - name: Test drivers build id: build run: | - echo "Testing build of drivers against: ${{ steps.latest-version.outputs.latest_vers }}" - driverkit docker -c linux/dk.yaml -l debug + echo "Testing build of drivers against: ${{ needs.compute-latest-version.latest_vers }}" + chmod +x driverkit + ./driverkit docker -c dk.yaml -l debug + build-latest-kernel-arm64: + needs: 'compute-latest-version' + outputs: + build: ${{ steps.build.outcome }} + runs-on: 'actuated-arm64-8cpu-16gb' + steps: + - name: Download driverkit config + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + with: + name: driverkit_config.yaml + + - name: Download latest driverkit artifact + uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6 + with: + name: driverkit-arm64 + workflow: release.yml + repo: falcosecurity/driverkit + + - name: Test drivers build + id: build + run: | + echo "Testing build of drivers against: ${{ needs.compute-latest-version.latest_vers }}" + chmod +x driverkit + ./driverkit docker -c dk.yaml -l debug + + badge-latest-kernel: + if: always() && github.event_name == 'schedule' + runs-on: 'ubuntu-latest' + needs: [compute-latest-version,build-latest-kernel-amd64,build-latest-kernel-arm64] + steps: - name: Update README badge uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0 - if: always() && github.event_name == 'schedule' with: auth: ${{ secrets.FEDEDP_GIST_SECRET }} gistID: 1cbc5d42edf8e3a02fb75e76625f1072 filename: kernel.json label: Drivers build - message: ${{ steps.latest-version.outputs.latest_vers }} - color: ${{ steps.build.outcome != 'success' && 'red' || 'brightgreen' }} + message: ${{ needs.compute-latest-version.latest_vers }} + color: ${{ (needs.build-latest-kernel-amd64.build != 'success' || needs.build-latest-kernel-arm64.build != 'success') && 'red' || 'brightgreen' }} From aa6951e2a88097677cf3f3e8d847bd1bc7f1e7eb Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 17 Oct 2024 10:31:37 +0200 Subject: [PATCH 31/45] fix(ci): fixed latest-kernel CI usage of steps/jobs outputs. Signed-off-by: Federico Di Pierro --- .github/workflows/latest-kernel.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 4be8b123cb..75a8707e73 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -13,7 +13,7 @@ on: jobs: compute-latest-version: outputs: - latest_vers: ${{ steps.latest-version.latest_vers }} + latest_vers: ${{ steps.latest-version.outputs.latest_vers }} runs-on: 'ubuntu-latest' steps: - name: Checkout Archlinux mainline package ⤵️ @@ -70,7 +70,7 @@ jobs: - name: Test drivers build id: build run: | - echo "Testing build of drivers against: ${{ needs.compute-latest-version.latest_vers }}" + echo "Testing build of drivers against: ${{ needs.compute-latest-version.outputs.latest_vers }}" chmod +x driverkit ./driverkit docker -c dk.yaml -l debug @@ -95,7 +95,7 @@ jobs: - name: Test drivers build id: build run: | - echo "Testing build of drivers against: ${{ needs.compute-latest-version.latest_vers }}" + echo "Testing build of drivers against: ${{ needs.compute-latest-version.outputs.latest_vers }}" chmod +x driverkit ./driverkit docker -c dk.yaml -l debug @@ -111,5 +111,5 @@ jobs: gistID: 1cbc5d42edf8e3a02fb75e76625f1072 filename: kernel.json label: Drivers build - message: ${{ needs.compute-latest-version.latest_vers }} - color: ${{ (needs.build-latest-kernel-amd64.build != 'success' || needs.build-latest-kernel-arm64.build != 'success') && 'red' || 'brightgreen' }} + message: ${{ needs.compute-latest-version.outputs.latest_vers }} + color: ${{ (needs.build-latest-kernel-amd64.outputs.build != 'success' || needs.build-latest-kernel-arm64.outputs.build != 'success') && 'red' || 'brightgreen' }} From f101f1e9d1200e43df8427bbd51b2b31e05cbcd8 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 17 Oct 2024 15:07:10 +0200 Subject: [PATCH 32/45] fix(ci): fixed create-comment-kernel-testing workflow when kernel-testing CI does not run. Signed-off-by: Federico Di Pierro --- .../workflows/create-comment-kernel-testing.yml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.github/workflows/create-comment-kernel-testing.yml b/.github/workflows/create-comment-kernel-testing.yml index e7ca7a68bb..adf52b70a2 100644 --- a/.github/workflows/create-comment-kernel-testing.yml +++ b/.github/workflows/create-comment-kernel-testing.yml @@ -23,9 +23,13 @@ jobs: repo: context.repo.repo, run_id: ${{github.event.workflow_run.id }}, }); - var matchArtifact = artifacts.data.artifacts.filter((artifact) => { + var matchArtifacts = artifacts.data.artifacts.filter((artifact) => { return artifact.name == "pr-kernel-testing" - })[0]; + }); + if (matchArtifacts == null) { + exit 0; + } + var matchArtifact = matchArtifacts[0]; var download = await github.rest.actions.downloadArtifact({ owner: context.repo.owner, repo: context.repo.repo, @@ -36,7 +40,10 @@ jobs: fs.writeFileSync('${{github.workspace}}/pr.zip', Buffer.from(download.data)); - name: 'Unpack artifact' - run: unzip pr.zip + run: + if [ -f pr.zip ]; then + unzip pr.zip + fi - name: 'Comment on PR' uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 @@ -45,6 +52,9 @@ jobs: # Taken from https://github.com/actions/github-script/blob/main/.github/workflows/pull-request-test.yml script: | var fs = require('fs'); + if (!fs.existsSync('./NR')) { + exit 0; + } var issue_number = Number(fs.readFileSync('./NR')); var comment_body = fs.readFileSync('./COMMENT'); From 12d3a8ba673496aa53d1d41227288a257b9e3b2e Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Thu, 17 Oct 2024 15:08:21 +0200 Subject: [PATCH 33/45] fix(ci): fixed create-comment-perf workflow when perf CI does not run. Signed-off-by: Federico Di Pierro --- .github/workflows/create-comment-perf.yml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.github/workflows/create-comment-perf.yml b/.github/workflows/create-comment-perf.yml index 03dd021e14..f71752efff 100644 --- a/.github/workflows/create-comment-perf.yml +++ b/.github/workflows/create-comment-perf.yml @@ -23,9 +23,13 @@ jobs: repo: context.repo.repo, run_id: ${{github.event.workflow_run.id }}, }); - var matchArtifact = artifacts.data.artifacts.filter((artifact) => { + var matchArtifacts = artifacts.data.artifacts.filter((artifact) => { return artifact.name == "pr-perf" - })[0]; + }); + if (matchArtifacts == null) { + exit 0; + } + var matchArtifact = matchArtifacts[0]; var download = await github.rest.actions.downloadArtifact({ owner: context.repo.owner, repo: context.repo.repo, @@ -36,7 +40,10 @@ jobs: fs.writeFileSync('${{github.workspace}}/pr.zip', Buffer.from(download.data)); - name: 'Unpack artifact' - run: unzip pr.zip + run: | + if [ -f pr.zip ]; then + unzip pr.zip + fi - name: 'Comment on PR' uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 @@ -45,6 +52,9 @@ jobs: # Taken from https://github.com/actions/github-script/blob/main/.github/workflows/pull-request-test.yml script: | var fs = require('fs'); + if (!fs.existsSync('./NR')) { + exit 0; + } var issue_number = Number(fs.readFileSync('./NR')); var comment_body = fs.readFileSync('./COMMENT'); From e9168cac199228d7754c717ca5916457fd079a6b Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 21 Oct 2024 11:35:45 +0200 Subject: [PATCH 34/45] fix(ci): use `process.exit();` to leave node script in github/action-script. Signed-off-by: Federico Di Pierro --- .github/workflows/create-comment-kernel-testing.yml | 6 ++++-- .github/workflows/create-comment-perf.yml | 6 ++++-- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/create-comment-kernel-testing.yml b/.github/workflows/create-comment-kernel-testing.yml index adf52b70a2..f051f23e86 100644 --- a/.github/workflows/create-comment-kernel-testing.yml +++ b/.github/workflows/create-comment-kernel-testing.yml @@ -27,7 +27,8 @@ jobs: return artifact.name == "pr-kernel-testing" }); if (matchArtifacts == null) { - exit 0; + var process = require('process'); + process.exit(); } var matchArtifact = matchArtifacts[0]; var download = await github.rest.actions.downloadArtifact({ @@ -53,7 +54,8 @@ jobs: script: | var fs = require('fs'); if (!fs.existsSync('./NR')) { - exit 0; + var process = require('process'); + process.exit(); } var issue_number = Number(fs.readFileSync('./NR')); var comment_body = fs.readFileSync('./COMMENT'); diff --git a/.github/workflows/create-comment-perf.yml b/.github/workflows/create-comment-perf.yml index f71752efff..255c353868 100644 --- a/.github/workflows/create-comment-perf.yml +++ b/.github/workflows/create-comment-perf.yml @@ -27,7 +27,8 @@ jobs: return artifact.name == "pr-perf" }); if (matchArtifacts == null) { - exit 0; + var process = require('process'); + process.exit(); } var matchArtifact = matchArtifacts[0]; var download = await github.rest.actions.downloadArtifact({ @@ -53,7 +54,8 @@ jobs: script: | var fs = require('fs'); if (!fs.existsSync('./NR')) { - exit 0; + var process = require('process'); + process.exit(); } var issue_number = Number(fs.readFileSync('./NR')); var comment_body = fs.readFileSync('./COMMENT'); From 93874673366957f033ef52d4d9834ba286ca2649 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 21 Oct 2024 16:09:39 +0200 Subject: [PATCH 35/45] fix(ci): create-comment workflows array length check. Signed-off-by: Federico Di Pierro --- .github/workflows/create-comment-kernel-testing.yml | 2 +- .github/workflows/create-comment-perf.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/create-comment-kernel-testing.yml b/.github/workflows/create-comment-kernel-testing.yml index f051f23e86..1b7dcb22ad 100644 --- a/.github/workflows/create-comment-kernel-testing.yml +++ b/.github/workflows/create-comment-kernel-testing.yml @@ -26,7 +26,7 @@ jobs: var matchArtifacts = artifacts.data.artifacts.filter((artifact) => { return artifact.name == "pr-kernel-testing" }); - if (matchArtifacts == null) { + if (!Array.isArray(matchArtifacts) || !matchArtifacts.length) { var process = require('process'); process.exit(); } diff --git a/.github/workflows/create-comment-perf.yml b/.github/workflows/create-comment-perf.yml index 255c353868..b4be5221b9 100644 --- a/.github/workflows/create-comment-perf.yml +++ b/.github/workflows/create-comment-perf.yml @@ -26,7 +26,7 @@ jobs: var matchArtifacts = artifacts.data.artifacts.filter((artifact) => { return artifact.name == "pr-perf" }); - if (matchArtifacts == null) { + if (!Array.isArray(matchArtifacts) || !matchArtifacts.length) { var process = require('process'); process.exit(); } From a152203e79f2d39479a4b4e19b1fdbe2c5a34524 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 10:32:46 +0000 Subject: [PATCH 36/45] chore(deps): Bump uraimo/run-on-arch-action in the actions group Bumps the actions group with 1 update: [uraimo/run-on-arch-action](https://github.com/uraimo/run-on-arch-action). Updates `uraimo/run-on-arch-action` from 2.7.2 to 2.8.1 - [Release notes](https://github.com/uraimo/run-on-arch-action/releases) - [Commits](https://github.com/uraimo/run-on-arch-action/compare/b0ffb25eb00af00468375982384441f063da1741...5397f9e30a9b62422f302092631c99ae1effcd9e) --- updated-dependencies: - dependency-name: uraimo/run-on-arch-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/drivers_ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index efc1e0d033..25c740418f 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -223,7 +223,7 @@ jobs: with: fetch-depth: 0 - - uses: uraimo/run-on-arch-action@b0ffb25eb00af00468375982384441f063da1741 # v2.7.2 + - uses: uraimo/run-on-arch-action@5397f9e30a9b62422f302092631c99ae1effcd9e # v2.8.1 name: Run s390x build 🏗️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' with: From 1a50abadd0d476581526a506fe43e3ad2ffdf7a6 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Fri, 20 Sep 2024 17:36:28 +0200 Subject: [PATCH 37/45] chore(ci): keep zig development version alive by using actions/cache. Signed-off-by: Federico Di Pierro --- .github/actions/install-zig/action.yml | 29 +++++++++++++++++--------- 1 file changed, 19 insertions(+), 10 deletions(-) diff --git a/.github/actions/install-zig/action.yml b/.github/actions/install-zig/action.yml index e7eb11f98b..6c4b7dca30 100644 --- a/.github/actions/install-zig/action.yml +++ b/.github/actions/install-zig/action.yml @@ -7,17 +7,23 @@ inputs: required: false default: 'sudo' -outputs: - zig_path: - description: "Path of installed zig, automatically added to GITHUB_PATH" - value: ${{ steps.zig.outputs.zig-path }} - runs: using: "composite" steps: - - name: Install zig + # TODO: this is only needed because we are using a development version of zig, + # since we need https://github.com/ziglang/zig/pull/21253 to be included. + # Development versions of zig are not kept alive forever, but get overridden. + # We cache it to keep it alive. + - name: Download zig (cached) + id: cache-zig + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + with: + path: /usr/local/zig + key: zig-${{ runner.os }}-${{ runner.arch }} + + - name: Download zig + if: steps.cache-zig.outputs.cache-hit != 'true' shell: bash - id: zig env: ZIG_VERSION: '0.14.0-dev.1588+2111f4c38' run: | @@ -38,10 +44,13 @@ runs: ${{ inputs.sudo }} mkdir -p /usr/local/zig/ ${{ inputs.sudo }} cp -R zig-linux-$(uname -m)-${ZIG_VERSION}/* /usr/local/zig/ + + - name: Setup zig + shell: bash + id: zig + run: | echo "/usr/local/zig" >> $GITHUB_PATH echo "CC=zig-cc" >> $GITHUB_ENV echo "CXX=zig-c++" >> $GITHUB_ENV echo "AR=zig ar" >> $GITHUB_ENV - echo "RANLIB=zig ranlib" >> $GITHUB_ENV - - echo "zig-path=/usr/local/zig/zig-linux-$(uname -m)-${ZIG_VERSION}" >> $GITHUB_OUTPUT + echo "RANLIB=zig ranlib" >> $GITHUB_ENV \ No newline at end of file From ef5a56dbe6a02da30f7022878af156ba2db033b6 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 23 Sep 2024 09:46:39 +0200 Subject: [PATCH 38/45] chore(ci): bump the zig version to latest. Moreover, use zig version as cache key too. Signed-off-by: Federico Di Pierro --- .github/actions/install-zig/action.yml | 24 +++++++++++++++--------- 1 file changed, 15 insertions(+), 9 deletions(-) diff --git a/.github/actions/install-zig/action.yml b/.github/actions/install-zig/action.yml index 6c4b7dca30..75d937baeb 100644 --- a/.github/actions/install-zig/action.yml +++ b/.github/actions/install-zig/action.yml @@ -10,6 +10,14 @@ inputs: runs: using: "composite" steps: + - name: Store zig version as local output + shell: bash + id: store + env: + ZIG_VERSION: '0.14.0-dev.1632+d83a3f174' + run: | + echo "zig_version=${ZIG_VERSION}" >> "$GITHUB_OUTPUT" + # TODO: this is only needed because we are using a development version of zig, # since we need https://github.com/ziglang/zig/pull/21253 to be included. # Development versions of zig are not kept alive forever, but get overridden. @@ -19,31 +27,29 @@ runs: uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 with: path: /usr/local/zig - key: zig-${{ runner.os }}-${{ runner.arch }} + key: zig-${{ runner.os }}-${{ runner.arch }}-${{ steps.store.outputs.zig_version }} - name: Download zig if: steps.cache-zig.outputs.cache-hit != 'true' shell: bash - env: - ZIG_VERSION: '0.14.0-dev.1588+2111f4c38' run: | - curl -L -o zig.tar.xz https://ziglang.org/builds/zig-linux-$(uname -m)-${ZIG_VERSION}.tar.xz + curl -L -o zig.tar.xz https://ziglang.org/builds/zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}.tar.xz tar -xvf zig.tar.xz - cat > zig-linux-$(uname -m)-${ZIG_VERSION}/zig-cc < zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}/zig-cc < zig-linux-$(uname -m)-${ZIG_VERSION}/zig-c++ < zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}/zig-c++ < Date: Tue, 22 Oct 2024 09:57:12 +0200 Subject: [PATCH 39/45] chore(ci): bump zig version and improve install-zig action. Signed-off-by: Federico Di Pierro --- .github/actions/install-zig/action.yml | 15 ++++++--------- .github/workflows/ci.yml | 2 -- 2 files changed, 6 insertions(+), 11 deletions(-) diff --git a/.github/actions/install-zig/action.yml b/.github/actions/install-zig/action.yml index 75d937baeb..d233148baa 100644 --- a/.github/actions/install-zig/action.yml +++ b/.github/actions/install-zig/action.yml @@ -1,12 +1,6 @@ name: 'install-zig' description: 'Install zig compiler and make it available in PATH.' -inputs: - sudo: - description: 'Specify a sudo command. Put it empty when sudo is not available.' - required: false - default: 'sudo' - runs: using: "composite" steps: @@ -14,10 +8,14 @@ runs: shell: bash id: store env: - ZIG_VERSION: '0.14.0-dev.1632+d83a3f174' + ZIG_VERSION: '0.14.0-dev.1952+9f84f7f92' run: | echo "zig_version=${ZIG_VERSION}" >> "$GITHUB_OUTPUT" + - name: Create zig install folder + shell: bash + run: mkdir /usr/local/zig + # TODO: this is only needed because we are using a development version of zig, # since we need https://github.com/ziglang/zig/pull/21253 to be included. # Development versions of zig are not kept alive forever, but get overridden. @@ -48,8 +46,7 @@ runs: EOF chmod +x zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}/zig-c++ - ${{ inputs.sudo }} mkdir -p /usr/local/zig/ - ${{ inputs.sudo }} cp -R zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}/* /usr/local/zig/ + cp -R zig-linux-$(uname -m)-${{ steps.store.outputs.zig_version }}/* /usr/local/zig/ - name: Setup zig shell: bash diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9fa6b4bb55..fa5e3472f9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -64,8 +64,6 @@ jobs: - name: Install zig if: matrix.name == 'zig' uses: ./.github/actions/install-zig - with: - sudo: '' - name: Build and test 🏗️🧪 env: From 3ff318deaa69b7e77c64ad1c6db097aec846c42b Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Tue, 22 Oct 2024 10:32:23 +0200 Subject: [PATCH 40/45] fix(ci): fixed create-comment-kernel-testing typo. Signed-off-by: Federico Di Pierro --- .github/workflows/create-comment-kernel-testing.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/create-comment-kernel-testing.yml b/.github/workflows/create-comment-kernel-testing.yml index 1b7dcb22ad..07f79baca7 100644 --- a/.github/workflows/create-comment-kernel-testing.yml +++ b/.github/workflows/create-comment-kernel-testing.yml @@ -41,7 +41,7 @@ jobs: fs.writeFileSync('${{github.workspace}}/pr.zip', Buffer.from(download.data)); - name: 'Unpack artifact' - run: + run: | if [ -f pr.zip ]; then unzip pr.zip fi From d0c5297dee7e6daf780b2a3b0909335ddc60c095 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Tue, 22 Oct 2024 12:42:36 +0200 Subject: [PATCH 41/45] chore(ci): increase timeout to 5minutes for driverkit build in latest-kernel workflow. Signed-off-by: Federico Di Pierro --- .github/workflows/latest-kernel.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 75a8707e73..6e6ee7b5d9 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -72,7 +72,7 @@ jobs: run: | echo "Testing build of drivers against: ${{ needs.compute-latest-version.outputs.latest_vers }}" chmod +x driverkit - ./driverkit docker -c dk.yaml -l debug + ./driverkit docker -c dk.yaml -l debug --timeout 300 build-latest-kernel-arm64: needs: 'compute-latest-version' @@ -97,7 +97,7 @@ jobs: run: | echo "Testing build of drivers against: ${{ needs.compute-latest-version.outputs.latest_vers }}" chmod +x driverkit - ./driverkit docker -c dk.yaml -l debug + ./driverkit docker -c dk.yaml -l debug --timeout 300 badge-latest-kernel: if: always() && github.event_name == 'schedule' From 2a67310d14ddf9fdf11766bc2d3ddabb8d1d5e9b Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Fri, 13 Sep 2024 09:11:09 +0200 Subject: [PATCH 42/45] update(ci): use cncf provided self hosted runners for arm64. Signed-off-by: Federico Di Pierro --- .github/workflows/ci.yml | 2 +- .github/workflows/drivers_ci.yml | 31 +++++------------------ .github/workflows/e2e_ci.yml | 38 +++++++++-------------------- .github/workflows/latest-kernel.yml | 2 +- 4 files changed, 20 insertions(+), 53 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fa5e3472f9..60b0702fc8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ concurrency: jobs: build-libs-linux: name: build-libs-linux-${{ matrix.arch }} 😁 (${{ matrix.name }}) - runs-on: ${{ (matrix.arch == 'arm64' && 'actuated-arm64-8cpu-16gb') || 'ubuntu-22.04' }} + runs-on: ${{ (matrix.arch == 'arm64' && 'github-arm64-2c-8gb') || 'ubuntu-22.04' }} strategy: fail-fast: false matrix: diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 25c740418f..4566d5988e 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -39,7 +39,7 @@ jobs: # This job run all engine tests and scap-open test-scap: name: test-scap-${{ matrix.arch }} 😆 (bundled_deps) - runs-on: ${{ (matrix.arch == 'arm64' && 'actuated-arm64-8cpu-16gb') || 'ubuntu-22.04' }} + runs-on: ${{ (matrix.arch == 'arm64' && 'github-arm64-2c-8gb') || 'ubuntu-22.04' }} needs: paths-filter strategy: matrix: @@ -63,24 +63,12 @@ jobs: if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' run: | sudo apt update - sudo apt install -y --no-install-recommends ca-certificates cmake build-essential clang-14 llvm-14 git pkg-config autoconf automake libtool libelf-dev libcap-dev - sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-14 90 - sudo update-alternatives --install /usr/bin/llvm-strip llvm-strip /usr/bin/llvm-strip-14 90 - sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 + sudo apt install -y --no-install-recommends ca-certificates cmake build-essential clang llvm git pkg-config autoconf automake libtool libelf-dev libcap-dev linux-headers-$(uname -r) git clone https://github.com/libbpf/bpftool.git --branch v7.3.0 --single-branch cd bpftool git submodule update --init cd src && sudo make install - - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 - if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'arm64' - - - name: Install kernel headers - if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'amd64' - run: | - sudo apt install -y --no-install-recommends linux-headers-$(uname -r) - - name: Build scap-open and drivers 🏗️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' run: | @@ -116,7 +104,7 @@ jobs: test-drivers: name: test-drivers-${{ matrix.arch }} 😇 (bundled_deps) - runs-on: ${{ (matrix.arch == 'arm64' && 'actuated-arm64-8cpu-16gb') || 'ubuntu-22.04' }} + runs-on: ${{ (matrix.arch == 'arm64' && 'github-arm64-2c-8gb') || 'ubuntu-22.04' }} needs: paths-filter strategy: matrix: @@ -133,23 +121,16 @@ jobs: if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' run: | sudo apt update - sudo apt install -y --no-install-recommends ca-certificates cmake build-essential git pkg-config autoconf automake libelf-dev libcap-dev clang-14 llvm-14 libtool - sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-14 90 - sudo update-alternatives --install /usr/bin/llvm-strip llvm-strip /usr/bin/llvm-strip-14 90 - sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 + sudo apt install -y --no-install-recommends ca-certificates cmake build-essential git pkg-config autoconf automake libelf-dev libcap-dev clang llvm libtool linux-headers-$(uname -r) git clone https://github.com/libbpf/bpftool.git --branch v7.3.0 --single-branch cd bpftool git submodule update --init cd src && sudo make install - - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 - if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'arm64' - - - name: Install kernel headers and gcc + - name: Install multilib compilers for ia32 tests if: (needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true') && matrix.arch == 'amd64' run: | - sudo apt install -y --no-install-recommends linux-headers-$(uname -r) gcc-multilib g++-multilib + sudo apt install -y --no-install-recommends gcc-multilib g++-multilib - name: Build drivers tests 🏗️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' diff --git a/.github/workflows/e2e_ci.yml b/.github/workflows/e2e_ci.yml index badb954d22..b8dd254385 100644 --- a/.github/workflows/e2e_ci.yml +++ b/.github/workflows/e2e_ci.yml @@ -15,7 +15,7 @@ concurrency: jobs: build-test-e2e: name: build-test-e2e-${{ matrix.arch }} 😇 (bundled_deps) - runs-on: ${{ (matrix.arch == 'arm64' && 'actuated-arm64-8cpu-16gb') || 'ubuntu-22.04' }} + runs-on: ${{ (matrix.arch == 'arm64' && 'github-arm64-2c-8gb') || 'ubuntu-22.04' }} strategy: matrix: arch: [amd64, arm64] @@ -32,7 +32,8 @@ jobs: ca-certificates \ cmake \ build-essential \ - clang-14 llvm-14 \ + clang \ + llvm \ git \ clang \ ccache \ @@ -54,24 +55,18 @@ jobs: libgrpc++-dev \ protobuf-compiler-grpc \ libgtest-dev \ - libprotobuf-dev - sudo update-alternatives --install /usr/bin/clang clang /usr/bin/clang-14 90 - sudo update-alternatives --install /usr/bin/llvm-strip llvm-strip /usr/bin/llvm-strip-14 90 - sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 + libprotobuf-dev \ + linux-headers-$(uname -r) sudo .github/install-deps.sh git clone https://github.com/libbpf/bpftool.git --branch v7.3.0 --single-branch cd bpftool git submodule update --init cd src && sudo make install - - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 - if: matrix.arch == 'arm64' - - - name: Install kernel headers and gcc + - name: Install multilib compilers for ia32 tests if: matrix.arch == 'amd64' run: | - sudo apt install -y --no-install-recommends linux-headers-$(uname -r) gcc-multilib g++-multilib + sudo apt install -y --no-install-recommends gcc-multilib g++-multilib - name: Run sccache-cache uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6 @@ -110,7 +105,7 @@ jobs: test-e2e: name: test-e2e-${{ matrix.arch }}-${{ matrix.driver.name }} 😇 (bundled_deps) needs: [build-test-e2e] - runs-on: ${{ (matrix.arch == 'arm64' && 'actuated-arm64-8cpu-16gb') || 'ubuntu-22.04' }} + runs-on: ${{ (matrix.arch == 'arm64' && 'github-arm64-2c-8gb') || 'ubuntu-22.04' }} strategy: matrix: arch: [amd64, arm64] @@ -140,23 +135,14 @@ jobs: run: | sudo apt update - - name: Install multilib + - name: Install multilib compilers for ia32 tests if: matrix.arch == 'amd64' run: | sudo apt install -y --no-install-recommends gcc-multilib g++-multilib - name: Install deps run: | - sudo apt install -y --no-install-recommends clang gcc llvm build-essential cmake python3 quota - - - name: Install kernel headers (actuated) - uses: self-actuated/get-kernel-sources@201eed7d915ac0a6021fb402cde5be7a6b945b59 # v2 - if: matrix.arch == 'arm64' - - - name: Install kernel headers and gcc - if: matrix.arch == 'amd64' - run: | - sudo apt install -y --no-install-recommends linux-headers-$(uname -r) gcc-multilib g++-multilib + sudo apt install -y --no-install-recommends clang gcc llvm build-essential cmake python3 quota linux-headers-$(uname -r) # We have no guarantees that the kernel version is the same for the # different workers, so we rebuild the drivers. @@ -177,7 +163,7 @@ jobs: cd build/test/libsinsp_e2e/ sudo -E ./libsinsp_e2e_tests ${{ matrix.driver.option }} - # the actuated arm64 workers doesn't have the CONFIG_QFMT_V2 flag + # the arm64 workers don't have the CONFIG_QFMT_V2 flag # which is needed for the quotactl_ok test (cmd=QQUOTA_ON + id=QFMT_VFS_V0). - name: Run e2e tests with ${{ matrix.driver.name }} 🏎️ if: matrix.arch == 'arm64' @@ -185,4 +171,4 @@ jobs: UBSAN_OPTIONS: print_stacktrace=1 run: | cd build/test/libsinsp_e2e/ - sudo -E ./libsinsp_e2e_tests ${{ matrix.driver.option }} --gtest_filter=-sys_call_test.quotactl_ok + sudo -E ./libsinsp_e2e_tests ${{ matrix.driver.option }} --gtest_filter=-sys_call_test.quotactl_ok \ No newline at end of file diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml index 6e6ee7b5d9..1a484a2c7b 100644 --- a/.github/workflows/latest-kernel.yml +++ b/.github/workflows/latest-kernel.yml @@ -78,7 +78,7 @@ jobs: needs: 'compute-latest-version' outputs: build: ${{ steps.build.outcome }} - runs-on: 'actuated-arm64-8cpu-16gb' + runs-on: 'github-arm64-2c-8gb' steps: - name: Download driverkit config uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 From 70f0538ebd08c24b637c675fbf69502da532e7db Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 11:03:03 +0000 Subject: [PATCH 43/45] chore(deps): Bump the actions group with 3 updates Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [actions/setup-python](https://github.com/actions/setup-python). Updates `actions/checkout` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/cache` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/3624ceb22c1c5a301c8db4169662070a689d9ea8...6849a6489940f00c2f30c0fb92c6274307ccb58a) Updates `actions/setup-python` from 5.2.0 to 5.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/f677139bbe7f9c59b41e40162b753c062f5d49a3...0b93645e9fea7318ecaed2b359559ac225c90a2b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/driver-api-version.yml | 2 +- .github/workflows/driver-schema-version.yml | 4 ++-- .github/workflows/drivers_ci.yml | 12 ++++++------ .github/workflows/e2e_ci.yml | 8 ++++---- .github/workflows/format.yml | 2 +- .github/workflows/pages.yml | 8 ++++---- .github/workflows/perf.yml | 4 ++-- .github/workflows/release-body.yml | 4 ++-- .github/workflows/semgrep_checks.yml | 4 ++-- .github/workflows/test_coverage_ci.yml | 2 +- .github/workflows/update-syscalls.yml | 2 +- 12 files changed, 34 insertions(+), 34 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 60b0702fc8..0a6a66aa8c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -49,7 +49,7 @@ jobs: rm -rf /tmp/cmake-3.22.5-linux-$(uname -m)/ - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -98,7 +98,7 @@ jobs: apk add g++ gcc cmake make git bash perl linux-headers autoconf automake m4 libtool elfutils-dev libelf-static patch binutils bpftool clang - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -117,7 +117,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -167,7 +167,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -182,7 +182,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -219,7 +219,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -299,7 +299,7 @@ jobs: sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -352,7 +352,7 @@ jobs: sudo apt install -y --no-install-recommends ca-certificates cmake build-essential clang-14 llvm-14 git pkg-config autoconf automake libtool libelf-dev libcap-dev linux-headers-$(uname -r) emscripten - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/driver-api-version.yml b/.github/workflows/driver-api-version.yml index 04bddc76bc..aa11a0d601 100644 --- a/.github/workflows/driver-api-version.yml +++ b/.github/workflows/driver-api-version.yml @@ -19,7 +19,7 @@ jobs: outputs: driver_api_changed: ${{ steps.filter.outputs.driver_api }} steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: diff --git a/.github/workflows/driver-schema-version.yml b/.github/workflows/driver-schema-version.yml index fc6ec369c2..aaa72d8b9f 100644 --- a/.github/workflows/driver-schema-version.yml +++ b/.github/workflows/driver-schema-version.yml @@ -19,7 +19,7 @@ jobs: outputs: driver_schema_changed: ${{ steps.filter.outputs.driver_schema }} steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: @@ -34,7 +34,7 @@ jobs: needs: paths-filter if: needs.paths-filter.outputs.driver_schema_changed == 'false' steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Check driver SCHEMA_VERSION uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2 diff --git a/.github/workflows/drivers_ci.yml b/.github/workflows/drivers_ci.yml index 4566d5988e..53f46dfb8f 100644 --- a/.github/workflows/drivers_ci.yml +++ b/.github/workflows/drivers_ci.yml @@ -24,7 +24,7 @@ jobs: libscap: ${{ steps.filter.outputs.libscap }} libpman: ${{ steps.filter.outputs.libpman }} steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: @@ -55,7 +55,7 @@ jobs: # We need to skip each step because of https://github.com/orgs/community/discussions/9141. # This avoids having a skipped job whose name is not the resolved matrix name, like "test-scap-${{ matrix.arch }} 😆 (bundled_deps)" if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -113,7 +113,7 @@ jobs: steps: - name: Checkout Libs ⤵️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -200,7 +200,7 @@ jobs: steps: - name: Checkout Libs ⤵️ if: needs.paths-filter.outputs.driver == 'true' || needs.paths-filter.outputs.libscap == 'true' || needs.paths-filter.outputs.libpman == 'true' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -243,7 +243,7 @@ jobs: dnf install -y bpftool ca-certificates cmake make automake gcc gcc-c++ kernel-devel clang git pkg-config autoconf automake libbpf-devel - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Build modern BPF skeleton run: | @@ -274,7 +274,7 @@ jobs: sudo update-alternatives --install /usr/bin/llc llc /usr/bin/llc-14 90 - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Download skeleton uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 diff --git a/.github/workflows/e2e_ci.yml b/.github/workflows/e2e_ci.yml index b8dd254385..bdde7df586 100644 --- a/.github/workflows/e2e_ci.yml +++ b/.github/workflows/e2e_ci.yml @@ -22,7 +22,7 @@ jobs: fail-fast: false steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -95,7 +95,7 @@ jobs: cd .. - name: Cache build - uses: actions/cache/save@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache/save@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 if: always() id: cache with: @@ -113,13 +113,13 @@ jobs: fail-fast: false steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: Restore build id: cache - uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache/restore@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 with: path: build key: build-e2e-${{ matrix.arch }}-${{ github.run_id }} diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 35e68b4d63..4bdae2f644 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout repository 🎉 - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 474833e2d4..4dbd542dcd 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -21,7 +21,7 @@ jobs: runs-on: [ "self-hosted", "linux", "X64" ] steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Run perf id: perf @@ -41,7 +41,7 @@ jobs: if-no-files-found: error - name: Checkout Flamegraph ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: repository: 'brendangregg/FlameGraph' path: flamegraph @@ -85,7 +85,7 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Download matrix X64 uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 @@ -128,7 +128,7 @@ jobs: echo '' > docs/heaptrack_scap_file.md sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/heaptrack_scap_file.md - - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0 + - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 with: python-version: 3.x diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml index 4ff78d5007..c5f3c6f6af 100644 --- a/.github/workflows/perf.yml +++ b/.github/workflows/perf.yml @@ -13,10 +13,10 @@ jobs: runs-on: [ "self-hosted", "linux", "X64" ] steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Checkout Google benchmark ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: repository: 'google/benchmark' ref: 'v1.9.0' diff --git a/.github/workflows/release-body.yml b/.github/workflows/release-body.yml index f167a4269d..1735ac7310 100644 --- a/.github/workflows/release-body.yml +++ b/.github/workflows/release-body.yml @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone repo - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Create release body file run: | @@ -120,7 +120,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone libs repo - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Create release body file run: | diff --git a/.github/workflows/semgrep_checks.yml b/.github/workflows/semgrep_checks.yml index 47c8cd9beb..a2091f17d5 100644 --- a/.github/workflows/semgrep_checks.yml +++ b/.github/workflows/semgrep_checks.yml @@ -14,7 +14,7 @@ jobs: image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: Scan PR for insecure API usage 🕵️ @@ -32,7 +32,7 @@ jobs: image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544 steps: - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: Scan PR for libs relateive include paths 🕵️ diff --git a/.github/workflows/test_coverage_ci.yml b/.github/workflows/test_coverage_ci.yml index 3c14b362c5..e51a32168c 100644 --- a/.github/workflows/test_coverage_ci.yml +++ b/.github/workflows/test_coverage_ci.yml @@ -27,7 +27,7 @@ jobs: gpg gpg-agent gcovr - name: Checkout Libs ⤵️ - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/update-syscalls.yml b/.github/workflows/update-syscalls.yml index b5d487552b..7d5c4ca631 100644 --- a/.github/workflows/update-syscalls.yml +++ b/.github/workflows/update-syscalls.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: ref: master path: libs From 8e0c741262a1fbe1740a47fa528188803fc3770e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 15:02:52 +0000 Subject: [PATCH 44/45] chore(deps): Bump softprops/action-gh-release from 1 to 2 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/de2c0eb89ae2a093876385947365aca7b0e5f844...c062e08bd532815e2082a85e87e3ef29c3e6d191) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release-body.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-body.yml b/.github/workflows/release-body.yml index 1735ac7310..564be84222 100644 --- a/.github/workflows/release-body.yml +++ b/.github/workflows/release-body.yml @@ -98,7 +98,7 @@ jobs: echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - name: Release - uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 + uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8 with: body_path: ./release-body.md tag_name: ${{ github.event.release.tag_name }} @@ -182,7 +182,7 @@ jobs: echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - name: Release - uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 + uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8 with: body_path: ./release-body.md tag_name: ${{ github.event.release.tag_name }} From 89cb0d3178c2d78c0463da56ff2aec5a76b5f4dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 Nov 2024 10:22:12 +0000 Subject: [PATCH 45/45] chore(deps): Bump softprops/action-gh-release in the actions group Bumps the actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `softprops/action-gh-release` from 2.0.8 to 2.0.9 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/c062e08bd532815e2082a85e87e3ef29c3e6d191...e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release-body.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-body.yml b/.github/workflows/release-body.yml index 564be84222..c03b56e5f3 100644 --- a/.github/workflows/release-body.yml +++ b/.github/workflows/release-body.yml @@ -98,7 +98,7 @@ jobs: echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - name: Release - uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8 + uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2.0.9 with: body_path: ./release-body.md tag_name: ${{ github.event.release.tag_name }} @@ -182,7 +182,7 @@ jobs: echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md - name: Release - uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8 + uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2.0.9 with: body_path: ./release-body.md tag_name: ${{ github.event.release.tag_name }}