~/talk

Challenges of Deploying eBPF-based Tracing in Embedded Systems, and Alternatives in Embe...

Talkat Embedded Linux Conference Europe 2022 · 2022-09-14..09-16· [security]
name:Bean Huo
links:none on file
slides:none on file

Micron EBU finds eBPF impractical on many embedded targets because it requires extra kernel options (BTF/trace support), toolchains like clang/LLVM or BPF tool runtimes, and can add 1.5 MB kernel increase; advanced eBPF features like the ring buffer map since 5.8 further restrict portability. A working alternative uses libtracefs/libtraceevent to attach to tracefs, parse the trace unit format, and optionally register event handlers; it deploys on older kernels but incurs userspace polling overhead reading per‑CPU ring buffers.

AI-written summary · about

  1. 0:00Start
  2. 4:31BPF/eBPF
  3. 10:43Dependencies for eBPF-based tool compilation/deplo
  4. 18:11Trace with libtracefs & libtraceevent
  5. 19:33Configure tracefs with libtracefs API
  6. 21:02Trace event formal file
  7. 23:58Read raw buffer()
  8. 27:52Comparison
  9. 29:06Conclusion
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.