This workshop will demonstrate how to use eBPF tools inside Kubernetes.
It's strongly recommended to have all requirements installed and ready to use before starting the workshop. This could be on your own computer or on a virtual machine that you have access to.
To try out the exercises of this workshop, you'll need to run a version of Minikube with a few additional patches to get access to the kernel headers. Please read minikube.md for instructions.
Please make sure that the machine you're using has kubectl installed. You can refer to this page for installation instructions.
During the workshop, we'll use release v0.2.0 of Inspektor Gadget for all examples. Please follow the installation instructions, to have this ready.
During the workshop, we'll also use kubectl-trace. Please follow the installation instructions for installing the plugin on your computer.
kubectl-trace is a client-side plugin but it starts pods in the Kubernetes cluster named "trace-runner". We needed changes on the trace-runner pod. We'll use a version of kubectl-trace with patches that haven't been released yet, so that it can work inside Minikube. In particular, we'll use this kubectl-trace branch alban/ikheaders that includes the following patch:
- iovisor/kubectl-trace#123 - add xz-utils to the container image
For convenience, there is a build with container images available on Docker registries.
$ kubectl trace run \
--imagename "docker.io/albanc/kubectl-trace-bpftrace:e896345e3d8f80aa968422c6199ac5180d688f65" \
--init-imagename "docker.io/albanc/kubectl-trace-init:e896345e3d8f80aa968422c6199ac5180d688f65" \
minikube -e "tracepoint:syscalls:sys_enter_* { @[probe] = count(); }"
$ kubectl trace get
$ kubectl trace attach kubectl-trace-a05bde1e-c44a-11ea-b314-c85b763781a4
It was built with the following commands
$ export IMAGE_NAME_INIT=docker.io/albanc/kubectl-trace-init
$ export IMAGE_NAME=docker.io/albanc/kubectl-trace-bpftrace
$ make build
$ make build image/build-init image/build
$ make image/push
During the workshop, we will cover the basics of BPF and we will go through the exercises listed here, in order.
You can refer to the slides at any time.