https://github.com/lazypwny751/potential-broccoli

an eBPF based alarm generator written in bpftrace and bash.
https://github.com/lazypwny751/potential-broccoli

alarm aya ebpf rust security

Last synced: about 2 months ago
JSON representation

an eBPF based alarm generator written in bpftrace and bash.

• Host: GitHub
• URL: https://github.com/lazypwny751/potential-broccoli
• Owner: lazypwny751
• License: gpl-3.0
• Created: 2024-08-12T13:24:58.000Z (6 months ago)
• Default Branch: main
• Last Pushed: 2024-12-21T02:34:44.000Z (about 2 months ago)
• Last Synced: 2024-12-21T03:17:12.058Z (about 2 months ago)
• Topics: alarm, aya, ebpf, rust, security
• Language: Rust
• Homepage:
• Size: 30.3 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# potential-broccoli

![image](https://github.com/user-attachments/assets/9c4dc2b8-a629-4cdb-a9a9-ef347740c334)

## Prerequisites

1. stable rust toolchains: `rustup toolchain install stable`

1. nightly rust toolchains: `rustup toolchain install nightly --component rust-src`

1. (if cross-compiling) rustup target: `rustup target add ${ARCH}-unknown-linux-musl`

1. (if cross-compiling) LLVM: (e.g.) `brew install llvm` (on macOS)

1. (if cross-compiling) C toolchain: (e.g.) [`brew install filosottile/musl-cross/musl-cross`](https://github.com/FiloSottile/homebrew-musl-cross) (on macOS)

1. bpf-linker: `cargo install bpf-linker` (`--no-default-features` on macOS)

## Build & Run

Use `cargo build`, `cargo check`, etc. as normal. Run your program with:

```shell

cargo run --release --config 'target."cfg(all())".runner="sudo -E"'

```

Cargo build scripts are used to automatically build the eBPF correctly and include it in the

program.

## Cross-compiling on macOS

Cross compilation should work on both Intel and Apple Silicon Macs.

```shell

CC=${ARCH}-linux-musl-gcc cargo build --package potential-broccoli --release \

  --target=${ARCH}-unknown-linux-musl \

  --config=target.${ARCH}-unknown-linux-musl.linker=\"${ARCH}-linux-musl-gcc\"

```

The cross-compiled program `target/${ARCH}-unknown-linux-musl/release/potential-broccoli` can be

copied to a Linux server or VM and run there.

# License

[GPL3](https://choosealicense.com/licenses/gpl-3.0/)