• Andrii Nakryiko's avatar
    libbpf: Use BPF perf link when supported by kernel · 668ace0e
    Andrii Nakryiko authored
    Detect kernel support for BPF perf link and prefer it when attaching to
    perf_event, tracepoint, kprobe/uprobe. Underlying perf_event FD will be kept
    open until BPF link is destroyed, at which point both perf_event FD and BPF
    link FD will be closed.
    
    This preserves current behavior in which perf_event FD is open for the
    duration of bpf_link's lifetime and user is able to "disconnect" bpf_link from
    underlying FD (with bpf_link__disconnect()), so that bpf_link__destroy()
    doesn't close underlying perf_event FD.When BPF perf link is used, disconnect
    will keep both perf_event and bpf_link FDs open, so it will be up to
    (advanced) user to close them. This approach is demonstrated in bpf_cookie.c
    selftests, added in this patch set.
    Signed-off-by: default avatarAndrii Nakryiko <andrii@kernel.org>
    Signed-off-by: default avatarDaniel Borkmann <daniel@iogearbox.net>
    Link: https://lore.kernel.org/bpf/20210815070609.987780-10-andrii@kernel.org
    668ace0e
libbpf.c 273 KB