kern: support uid/pid filter in ebpf TC hook. #1011
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: GO/C/C++ CI | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| branches: [ master ] | |
| jobs: | |
| build-on-ubuntu2004: | |
| runs-on: ubuntu-20.04 | |
| name: build on ubuntu-20.04 x86_64 | |
| steps: | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.21.0' | |
| - name: Install Compilers | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install --yes build-essential pkgconf libelf-dev llvm-9 clang-9 linux-tools-common linux-tools-generic gcc gcc-aarch64-linux-gnu libssl-dev | |
| for tool in "clang" "llc" "llvm-strip" | |
| do | |
| sudo rm -f /usr/bin/$tool | |
| sudo ln -s /usr/bin/$tool-9 /usr/bin/$tool | |
| done | |
| shell: bash | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: 'recursive' | |
| fetch-depth: 0 | |
| - name: Build | |
| run: | | |
| make clean | |
| make env | |
| DEBUG=1 make nocore -j4 | |
| cd ./lib/libpcap/ && sudo make install | |
| cd $GITHUB_WORKSPACE | |
| - name: golangci-lint | |
| uses: golangci/golangci-lint-action@v6 | |
| with: | |
| args: --disable-all -E errcheck -E staticcheck | |
| skip-cache: true | |
| problem-matchers: true | |
| - name: Build NOCORE | |
| run: | | |
| make clean | |
| make env | |
| make nocore | |
| - name: Test | |
| run: go test -v -race ./... | |
| build-on-ubuntu2204: | |
| runs-on: ubuntu-22.04 | |
| name: build on ubuntu-22.04 x86_64 | |
| steps: | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.21.0' | |
| - name: Install Compilers | |
| run: | | |
| sudo apt-get update | |
| kernel_ver=`uname -r | cut -d'-' -f 1` | |
| sudo apt-get install --yes build-essential pkgconf libelf-dev llvm-14 clang-14 flex bison linux-tools-common linux-tools-generic gcc gcc-aarch64-linux-gnu libssl-dev linux-source-${kernel_ver} | |
| for tool in "clang" "llc" "llvm-strip" | |
| do | |
| sudo rm -f /usr/bin/$tool | |
| sudo ln -s /usr/bin/$tool-14 /usr/bin/$tool | |
| done | |
| cd /usr/src | |
| sudo tar -xf linux-source-${kernel_ver}.tar.bz2 | |
| cd /usr/src/linux-source-${kernel_ver} | |
| test -f .config || sudo make oldconfig | |
| sudo make ARCH=arm64 CROSS_COMPILE=aarch64-linux-gnu- prepare V=0 | |
| ls -al /usr/src/linux-source-${kernel_ver} | |
| shell: bash | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: 'recursive' | |
| fetch-depth: 0 | |
| - name: Build CO-RE | |
| run: | | |
| make clean | |
| make env | |
| DEBUG=1 make -j8 | |
| cd ./lib/libpcap/ && sudo make install | |
| cd $GITHUB_WORKSPACE | |
| - name: golangci-lint | |
| uses: golangci/golangci-lint-action@v6 | |
| with: | |
| args: --disable-all -E errcheck -E staticcheck | |
| skip-cache: true | |
| problem-matchers: true | |
| - name: Build non-CO-RE | |
| run: | | |
| make clean | |
| make env | |
| make nocore | |
| - name: Build CO-RE (Cross-Compilation) | |
| run: | | |
| make clean | |
| CROSS_ARCH=arm64 make env | |
| CROSS_ARCH=arm64 make -j8 | |
| - name: Build non-CO-RE (Cross-Compilation/Android) | |
| run: | | |
| make clean | |
| CROSS_ARCH=arm64 make env | |
| ANDROID=1 CROSS_ARCH=arm64 make nocore -j8 | |
| - name: Test | |
| run: go test -v -race ./... | |
| build-on-ubuntu2204-arm64: | |
| runs-on: ubuntu-22.04 | |
| name: build on ubuntu-22.04 arm64 | |
| # Run steps on a matrix of 3 arch/distro combinations | |
| strategy: | |
| matrix: | |
| include: | |
| - arch: aarch64 | |
| distro: ubuntu22.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: 'recursive' | |
| fetch-depth: 0 | |
| set-safe-directory: '/source_code' | |
| - name: Branch Name | |
| run: | | |
| echo running on branch ${{ github.ref_name }} | |
| echo checkout directory ${GITHUB_WORKSPACE} | |
| echo PWD directory ${PWD} | |
| - name: Write File | |
| uses: DamianReeves/write-file-action@v1.2 | |
| with: | |
| path: ./bin/release_notes.txt | |
| contents: | | |
| "just for CI" | |
| write-mode: append | |
| - uses: uraimo/run-on-arch-action@v2 | |
| name: Build artifact | |
| id: build | |
| with: | |
| arch: ${{ matrix.arch }} | |
| distro: ${{ matrix.distro }} | |
| # Not required, but speeds up builds | |
| githubToken: ${{ github.token }} | |
| # Create an artifacts directory | |
| setup: | | |
| mkdir -p "${PWD}/artifacts" | |
| # Mount the artifacts directory as /artifacts in the container | |
| dockerRunArgs: | | |
| --volume "${PWD}/artifacts:/artifacts" | |
| --volume "${GITHUB_WORKSPACE}:/source_code" | |
| # Pass some environment variables to the container | |
| env: | # YAML, but pipe character is necessary | |
| artifact_name: ecapture-${{ github.ref_name }} | |
| # The shell to run commands with in the container | |
| shell: /bin/sh | |
| # Install some dependencies in the container. This speeds up builds if | |
| # you are also using githubToken. Any dependencies installed here will | |
| # be part of the container image that gets cached, so subsequent | |
| # builds don't have to re-install them. The image layer is cached | |
| # publicly in your project's package repository, so it is vital that | |
| # no secrets are present in the container state or logs. | |
| install: | | |
| uname -a | |
| apt-get update | |
| kernel_ver=`uname -r | cut -d'-' -f 1` | |
| apt-get install --yes wget git build-essential pkgconf libelf-dev llvm-12 clang-12 linux-tools-generic linux-tools-common flex bison file gcc-x86-64-linux-gnu libssl-dev bc linux-source-${kernel_ver} | |
| wget https://go.dev/dl/go1.21.0.linux-arm64.tar.gz | |
| rm -rf /usr/local/go | |
| tar -C /usr/local -xzf go1.21.0.linux-arm64.tar.gz | |
| cd /usr/src | |
| tar -xf linux-source-${kernel_ver}.tar.bz2 | |
| cd /usr/src/linux-source-${kernel_ver} | |
| test -f .config || make oldconfig > /dev/null | |
| make ARCH=x86 CROSS_COMPILE=x86_64-linux-gnu- prepare V=0 > /dev/null | |
| make prepare V=0 > /dev/null | |
| ls -al /usr/src/linux-source-${kernel_ver} | |
| # Produce a binary artifact and place it in the mounted volume | |
| run: | | |
| uname -a | |
| date | |
| export PATH=/usr/local/go/bin:$PATH:/usr/local/bin | |
| echo $PATH | |
| for tool in "clang" "llc" "llvm-strip" | |
| do | |
| rm -f /usr/bin/$tool | |
| ln -s /usr/bin/$tool-12 /usr/bin/$tool | |
| done | |
| clang --version | |
| which bpftool | |
| echo "cat /proc/1/cgroup:" | |
| cat /proc/1/cgroup | |
| echo "cat /proc/1/sched:" | |
| cat /proc/1/sched | |
| git config --global --add safe.directory /source_code | |
| cd /source_code | |
| kernel_ver=`uname -r | cut -d'-' -f 1` | |
| echo "-------------------start: Build CO-RE Linux (include non-CO-RE)-------------------" | |
| KERN_HEADERS=/usr/src/linux-source-${kernel_ver} make env | |
| make clean | |
| KERN_HEADERS=/usr/src/linux-source-${kernel_ver} make | |
| bin/ecapture -v | |
| echo "-------------------start: Build non-CO-RE (Cross-Compilation) Linux -------------------" | |
| make clean | |
| KERN_HEADERS=/usr/src/linux-source-${kernel_ver} CROSS_ARCH=amd64 make env | |
| KERN_HEADERS=/usr/src/linux-source-${kernel_ver} CROSS_ARCH=amd64 make nocore -j8 | |
| file bin/ecapture | |
| - name: Show the artifact | |
| # Items placed in /artifacts in the container will be in | |
| # ${PWD}/artifacts on the host. | |
| run: | | |
| ls -al "${PWD}/artifacts" |