trying to use bcc on debian 10, v5.8.5 kernel

[mmelo-yottaa]

I am trying to use bcc python bindings on Debian 10 with v5.8.5 kernel I built. Using the apt-install Debian 10 bcc package I get this failure:

mike@debian$ python bindtrace.py
In file included from /virtual/main.c:2:
In file included from /lib/modules/5.8.5/build/include/linux/sched.h:14:
In file included from /lib/modules/5.8.5/build/include/linux/pid.h:5:
In file included from /lib/modules/5.8.5/build/include/linux/rculist.h:11:
In file included from /lib/modules/5.8.5/build/include/linux/rcupdate.h:26:
In file included from /lib/modules/5.8.5/build/include/linux/irqflags.h:16:
In file included from /lib/modules/5.8.5/build/arch/x86/include/asm/irqflags.h:9:
In file included from /lib/modules/5.8.5/build/arch/x86/include/asm/nospec-branch.h:256:
/lib/modules/5.8.5/build/arch/x86/include/asm/segment.h:266:2: error: expected '(' after 'asm'
alternative_io ("lsl %[seg],%[p]",
^
/lib/modules/5.8.5/build/arch/x86/include/asm/alternative.h:240:2: note: expanded from macro 'alternative_io'
asm_inline volatile (ALTERNATIVE(oldinstr, newinstr, feature)
^

From reading #2573 it seems I might be well off building a new bcc. This was not easy, I uninstalled Debian 10 LLVM/clang and installed version 3.8 from Debian 9 (stretch) to match the instructions here:

https://github.com/iovisor/bcc/blob/master/INSTALL.md#debian---source

There were issues using newer Debian 10 LLVM/clang versions, lots of warnings during build, also errors and failed tests.

After down-rev'ing LLVM/clang, and installing all other prerequisites per the above URL, the build completed but a large number of tests fail. I can forward bcc_0.16.0-1_amd64.build if that is interesting.

Could you please point me at instructions for building bcc on Debian 10 that work? I can up-rev or down-rev installed components at necessary, although I prefer to use latest bcc / kernel / buildtools.

Thank you.

[javierhonduco]

Haven't investigated much yet but seems similar to the error I bumped into. The BPF / BCC Python code is the same, but with different kernel versions:

• Fails: Linux fv-az121 5.4.0-1025-azure #25~18.04.1-Ubuntu SMP Sat Sep 5 15:28:57 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
• Passes: Linux fv-az32 5.3.0-1035-azure #36-Ubuntu SMP Thu Aug 6 09:21:33 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

@yonghong-song Does this ring a bell?

[javierhonduco]

Just saw 2d1497c! Ubuntu ships with 0.10 by default released on May 29, 2019, and the fix was introduced in v0.12.0 on Oct 11, 2019 😭

Related #2678

[spumer]

I taking to the same issue but I was successfully install it for Debian 10 Buster by using @mika gist from #3224

Magic cmd is:

apt-get build-dep bpfcc

After that just follow common instruction:

Prepare deps:
Do not add line to /etc/apt/sources.* if you already have deb-src (not deb) source for buster main.

echo "deb-src http://deb.debian.org/debian buster main" | tee -a /etc/apt/sources.list.d/buster.list && \
apt-get update && \
apt-get build-dep bpfcc -y && \
apt-get install git clang -y

Build:

cd /usr/src/
git clone https://github.com/iovisor/bcc/
mkdir bcc/build
cd bcc/build
cmake -DPYTHON_CMD=python3 ..
make
make install
pushd src/python/
make
make install
popd

[insave-hosting]

Debian 11
apt install python3-bpfcc