TL;DR In this post, I explain how the Tetragon Agent reads process lifecycle data from the eBPF Map and sends it to clients.🐝 Process lifecycle data flow IntroductionObserver Reading Process Lifecycle Data from eBPF MapRead data from eBPF MapDeserialization of Process Lifecycle DataEvent type (operation types)DeserializationNotify Events to ListenersProcessManager Passes Data to server.ListenersProcess Lifecycle Data… Continue reading Tetragon Process Lifecycle Observation: Tetragon Agent Part
Category: eBPF
Tetragon Process Lifecycle Observation: eBPF Part
TL;DR In this post, I explain how Tetragon detects process creation and termination using eBPF.🐝 IntroductionOverviewkprobes and tracepointseBPF ProgramseBPF MapsTetragon AgentProcess creationeBPF program attached to tracepointWrite data to eBPF MapProcess terminationeBPF program attached to tracepointWrite data to eBPF MapWrap upNext stepRelated posts Introduction I was really impressed when I used Tetragon for the first time.… Continue reading Tetragon Process Lifecycle Observation: eBPF Part
First Contribution to the Tetragon Project
In my previous post, I described setting up my Tetragon development environment on macOS. Following that, I dove into the Tetragon documentation to start learning the ropes! However, I encountered issues with certain commands not working due to differences in Docker image versions and the ARM CPU. To resolve this, I submitted a few pull… Continue reading First Contribution to the Tetragon Project
Set up Tetragon Develop environment on MacOS with lima
TL;DR In this post, I will share how to set the Tetragon Develop environment on MacOS with lima. Also, this environment can be used not only to develop but also to try Tetragon directly, in docker, and Kubernetes on MacOS 🐝. Tetragon Develom environment Set up a Virtual MachineInstall limaPrepare a VM templateCreate a VMCheck… Continue reading Set up Tetragon Develop environment on MacOS with lima
Started my eBPF journey
In KubeCon 2023 @Chiccago, I was so excited about eBPF + Cilium. Then, I finally started learning them. For the first step, I did almost all of labs provided by Isovalent. They were really good! I was able to learn eBPF + Cilium + Tetragon so quickly. Below are the badges I got through labs!… Continue reading Started my eBPF journey