-
Notifications
You must be signed in to change notification settings - Fork 712
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ebpf not working in k8s #2784
Comments
@rade slight correction. Its actually kubernetes v1.5.4 with kops.
|
I'd check the mounts. On my laptop, I have:
I don't know kops but there was a similar issue on Amazon Linux due to a kernel bug. The workaround to the kernel bug was to make sure debugfs is mounted before starting the Docker daemon. In this order:
Another thing to check would be if the kernel has kprobes. On my laptop I have:
|
@ajohnstone could you run some of the checks alban suggested above? |
Hi, in the kubernetes manifests mount point /sys/kernel/debug Is empty
|
@ajohnstone thanks for testing. It seems you have kprobes correctly enabled in the kernel. Could you also check the content of the tracing directory?
On my laptop, the Does it work if you restart the docker daemon and containerd (without restarting the machine)? |
I've ran all the above and added a couple more tests below. Tbh I'm not sure what I should be looking for. Should /sys/kernel/debug/ be mounted from the host? Host
docker container debugfs
mnt namespace of docker daemon
|
Hah! I know what the problem is. We forgot to update the k8s yamls for scope to include the |
E.g.
|
Can confirm that works with debug mounted...
|
A user's scope fails to enable eBPF tracing with
They are running 4.4.65-k8s, apparently as shipped by kops 1.5.3.
The scope ebpf blog post says that
So is the above error an indication that the kernel has not been compiled with BPF? Or is something else not right?
And what does "etc" stand for?
@alban @2opremio any idea?
The text was updated successfully, but these errors were encountered: