This PR reconstructs the whole attach parts of bpftime/runtime. They are under /attach
There are four major targets:
/attach/base_attach_impl: Provide an abstraction of all attach impls. Any attach impl which implements this base class could be registeres to bpftime runtime (when other parts of bpftime/runtime were reconstructed), without modifying bpftime itself
/attach/frida_uprobe_attach_impl: Uprobe implementation based on frida. Migrated from the old attach manager.
/attach/syscall_trace_attach_impl: Syscall trace implementation based on zpoline. Split out from the old bpf_attach_ctx
/attach/text_segment_transformer: moved from the old agent-transformer
Also, tests were made for syscall_trace_attach_impl and frida_uprobe_attach_impl
Docs are in header files.
Other changes were made to bpftime:
Almost everything under /runtime/src/attach was removed. The implementation of attaching was moved out
Tests related that doesn't require ebpf programs were moved to /attach
[x] tests
[x] integrate with old code base
[x] syscall trace parts
[x] full docs
[x] text segment transformer - integrate to new attach folder
This PR reconstructs the whole attach parts of bpftime/runtime. They are under
/attach
There are four major targets:
/attach/base_attach_impl
: Provide an abstraction of all attach impls. Any attach impl which implements this base class could be registeres to bpftime runtime (when other parts of bpftime/runtime were reconstructed), without modifying bpftime itself/attach/frida_uprobe_attach_impl
: Uprobe implementation based on frida. Migrated from the old attach manager./attach/syscall_trace_attach_impl
: Syscall trace implementation based on zpoline. Split out from the old bpf_attach_ctx/attach/text_segment_transformer
: moved from the oldagent-transformer
Also, tests were made for
syscall_trace_attach_impl
andfrida_uprobe_attach_impl
Docs are in header files.
Other changes were made to bpftime:
Almost everything under
/runtime/src/attach
was removed. The implementation of attaching was moved outTests related that doesn't require ebpf programs were moved to
/attach
[x] tests
[x] integrate with old code base
[x] syscall trace parts
[x] full docs
[x] text segment transformer - integrate to new attach folder