1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
package internal
import (
"context"
"fmt"
appconfig "ior/internal/config"
"ior/internal/flags"
"ior/internal/probemanager"
"ior/internal/tracepoints"
"ior/internal/tui"
bpf "github.com/aquasecurity/libbpfgo"
)
// libbpfTracepointProgram wraps a libbpf BPF program as a probemanager.Program.
type libbpfTracepointProgram struct {
prog *bpf.BPFProg
}
func (p libbpfTracepointProgram) AttachTracepoint(category, name string) (probemanager.Link, error) {
return p.prog.AttachTracepoint(category, name)
}
// libbpfTracepointModule wraps a libbpf BPF module as a probemanager.Module.
type libbpfTracepointModule struct {
module *bpf.Module
}
func (m libbpfTracepointModule) GetProgram(progName string) (probemanager.Program, error) {
prog, err := m.module.GetProgram(progName)
if err != nil {
return nil, err
}
return libbpfTracepointProgram{prog: prog}, nil
}
func setupBPFModuleError(stage string, err error) error {
if err == nil {
return nil
}
return fmt.Errorf("setup BPF module: %s: %w", stage, err)
}
// setupBPFModule loads and attaches the BPF module, attaching tracepoints
// and registering the probe manager with any TUI runtime bindings.
func setupBPFModule(parentCtx context.Context, cfg flags.Config) (*bpf.Module, *probemanager.Manager, func(), error) {
releaseBindings := func() {}
bpfModule, stage, err := loadBPFModule()
if err != nil {
return nil, nil, releaseBindings, setupBPFModuleError(stage, err)
}
if err := resizeBPFMaps(cfg, bpfModule); err != nil {
bpfModule.Close()
return nil, nil, releaseBindings, setupBPFModuleError("resize maps", err)
}
if err := setBPFGlobals(cfg, bpfModule); err != nil {
bpfModule.Close()
return nil, nil, releaseBindings, setupBPFModuleError("set globals", err)
}
if err := bpfModule.BPFLoadObject(); err != nil {
bpfModule.Close()
return nil, nil, releaseBindings, setupBPFModuleError("load object", err)
}
mgr := probemanager.NewManager(libbpfTracepointModule{module: bpfModule})
if err := mgr.AttachAll(cfg.ShouldIAttachTracepoint, tracepoints.List); err != nil {
mgr.Close()
bpfModule.Close()
return nil, nil, releaseBindings, setupBPFModuleError("attach probes", err)
}
// setupBPFModule only injects the probe manager; it does not read TUI state,
// so RuntimePublisher is the correct narrower interface to use here.
if bindings, ok := tui.RuntimePublisherFromContext(parentCtx); ok {
bindings.SetProbeManager(mgr)
releaseBindings = func() { bindings.SetProbeManager(nil) }
}
return bpfModule, mgr, releaseBindings, nil
}
// setupEventChannel initialises the BPF ring-buffer and returns the event channel.
func setupEventChannel(bpfModule *bpf.Module) (chan []byte, error) {
ch := make(chan []byte, appconfig.DefaultChannelBufferSize)
rb, err := bpfModule.InitRingBuf("event_map", ch)
if err != nil {
return nil, err
}
rb.Poll(300)
return ch, nil
}
|
