v0.2.5-libbpf-0.7.0

v0.2.5-libbpf-0.7.0 contains various new helpers, APIs, and code improvements as well as official support for libbpf v0.7.0!

What's Changed

• Add version API by @saschagrunert in #125
• helpers: Added dynamic symbol resolver by @guyarb in #128
• argumentParsers: precompile argument and string maps by @NDStrahilevitz in #130
• Error handling fixes by @grantseltzer in #127
• introduce kernelsyms helper by @itamarmaouda101 in #133
• Compile tracee submodule against local libbpfgo by @grantseltzer in #126
• Fix selftest with deprecated api by @grantseltzer in #134
• Update libbpf to v0.7.0 by @saschagrunert in #131

v0.2.4-libbpf-0.6.1

v0.2.4-libbpf-0.6.1 is being release to revert changes to error handling that were introduced in the previous release. It reverts commits 088c639 and 3a827b2 but keeps all other parts of the previous release. It also contains small fixes and properly bumps libbpf submodule to 0.6.1.

v0.2.3-libbpf-0.6.1

v0.2.3-libbpf-0.6.1

v0.2.3-libbpf-0.6.1 is a small but impactful release that contains newly implemented libbpf apis, adds many new helper functions, and various quality of life fixes.

Breaking changes

• #89 contains breaking changes to the helper functions used for parsing system call arguments

New APIs

• Map batch operations (#97)
• Program pinning (#96)

New Helpers

• Parsing of raw arguments from system calls (#89)
• Security lockdown type detection (#103)

v0.2.2-libbpf-0.5.0

v0.2.2-libbpf-0.5.0 contains various new helpers, documentation additions, and bug fixes. This includes official support for libbpf v0.5.0.

See here for information about how we semantically version libbpfgo releases.

What's Changed

• Fix error message in BPFMap.Update by @derekparker in #29
• Change BPFMap method Update to unsafe.Pointer by @grantseltzer in #32
• Makefile: improvements by @rafaeldtinoco in #28
• Fix iterators selftest to use updated unsafe Pointer API by @grantseltzer in #36
• New helper (getter) functions and some refactoring by @geyslan in #41
• fix potential memory leaks by @yanivagman in #46
• Makefile: download libbpf submodule when not found by @geyslan in #44
• examples: Add tcpconnect as a libbpfgo example by @rafaeldtinoco in #45
• Add section in README about release versioning by @grantseltzer in #47
• Fix init_perf_buf error handling by @josedonizetti in #49
• Initial BTF support by @rafaeldtinoco in #50
• libbpfgo: change BPFProg.GetFd() return to int Go type by @geyslan in #52
• helpers: add initial btfinfo by @rafaeldtinoco in #53
• libbpfgo: run lint tool and fix issues by @rafaeldtinoco in #54
• kernel_features: bring MissingKernelConfigOptions to helper by @rafaeldtinoco in #57
• checking if new operation in newbtfino succeeded by @mtcherni95 in #59
• kernel_features: fix tests for new KernelConfig by @rafaeldtinoco in #58
• kernel_features: fix kconfig file read logic for procfs config.gz by @rafaeldtinoco in #63
• osinfo and kernel_features (kernel_config) refactoring and improvements by @rafaeldtinoco in #67
• helpers/kernel_config.go: allow kconfig files logic by @rafaeldtinoco in #70
• Add BPFLink.Destroy by @derekparker in #69
• Update README for semantic versioning by @grantseltzer in #71
• address kconfig post merge issues and document api by @rafaeldtinoco in #73
• Updates by @rafaeldtinoco in #76
• Remove soon to be deprecated resize api by @grantseltzer in #79
• libbpfgo: make AttachTracepoint() signature 1:1 with libbpf by @geyslan in #77
• libbpfgo: do not set btf_custom_path when no BTF is given by @rafaeldtinoco in #82
• Fix NewModuleFromBuffer by @derekparker in #83
• Introduce GetFd() for BPFLink by @geyslan in #78
• selftests: ringbuffers: give time to ringbuffer consumer by @geyslan in #86
• helpers/osinfo: host architecture detection by @rafaeldtinoco in #87
• Add helper to check if ftrace is enabled by @grantseltzer in #94

New Contributors

• @derekparker made their first contribution in #29
• @rafaeldtinoco made their first contribution in #28
• @geyslan made their first contribution in #41
• @josedonizetti made their first contribution in #49
• @mtcherni95 made their first contribution in #59

Full Changelog: v0.1.1...v0.2.2-libbpf-0.5.0

v0.2.1-libbpf-0.4.0

v0.2.1-libbpf-0.4.0

• Extensions to the API for libbpf including the ability to support custom BTF files
• An overhaul to helpers for checking kernel config
• Minor bug fixes

See here for information about how we semantically version libbpfgo releases.

List of changes

29bc86e - Add BPFLink.Destroy (#69) (Derek Parker)
1d1da58 - helpers/common: nit fix: gotfmt (Rafael David Tinoco)
efc3f40 - helpers/kernel_config: AddCustomKernelConfigs prototype change (Rafael David Tinoco)
dc406ff - helpers/kernel_config: force KernelConfigOption type to be used (Rafael David Tinoco)
b137715 - helpers/kernel_config: add custom KernelConfigOption's to the logic (Rafael David Tinoco)
3179924 - helpers/kernel_config.go: create export kConfigFilePath through function (Rafael David Tinoco)
0ccd53e - helpers/osinfo: export functions to access internal fields (Rafael David Tinoco)
a453321 - helpers/common: move CompareKernelRelease to common (Rafael David Tinoco)
afc530e - helpers/osinfo: unexport internal types (Rafael David Tinoco)
4dd0441 - helpers/common: make UnameRelease() a common function (Rafael David Tinoco)
3c1567b - helpers/osinfo: osinfo refactoring for env variable (Rafael David Tinoco)
95380e5 - helpers/kernel_config: kernel_features refactoring (Rafael David Tinoco)
59c9cc3 - helpers/common: functions common to all helpers (Rafael David Tinoco)
43fae25 - helpers/btfinfo: rename to osinfo and improve API (Rafael David Tinoco)
1e07685 - helpers/kernel_features: allow kconfig override (Rafael David Tinoco)
5fde94f - kernel_features: fix kconfig file read logic for procfs config.gz (Rafael David Tinoco)
7b38633 - kernel_features: fix tests for new KernelConfig (Rafael David Tinoco)
c3b9bd6 - checking if new operation in newbtfino succeeded (Michael Tcherniack)
a2a0e13 - kernel_features: bring MissingKernelConfigOptions to helper (#57) (Rafael David Tinoco)
0bbee70 - libbpfgo: run lint tool and fix issues (#54) (Rafael David Tinoco)
e8b2d25 - helpers: add initial btfinfo (Rafael David Tinoco)
0438957 - libbpfgo: change BPFProg.GetFd() return to int Go type (Geyslan G. Bem)
871dc67 - libbpfgo: support external BTF files (Rafael David Tinoco)
239e902 - libbpf: update to latest to have btf_custom_path support (Rafael David Tinoco)
391db95 - Fix init_perf_buf error handling (Jose Donizetti)

v0.1.1

The main new feature of this release is support for loading/attaching of tc bpf programs.

• Adds support for tc programs
• Adds support for uprobe programs
• Selftests
• Improved logo
• Improved README

v0.1.0

An initial baseline release which includes the following features:

• Loading of bpf objects to initialize a type Module.
• Attachment of bpf programs to hooks of the following types:
  • Kprobe
  • Kretprobe
  • LSM
  • Raw tracepoint
  • tracepoint
• A generic BPFMap mechanism for interacting with (updating, getting values, deleting keys, iterating, resizing,...) bpf maps.
• Reading of perf buffers and ring buffers

See the discussion here about moving libbpfgo to its own repository from tracee.