Closed amitschendel closed 2 months ago
Summary:
so instead of checking <5.4 we check <4.4 with BTF?
We are checking for BTF which is mandatory for our sensor and ig. Regarding the kernel version, checking 5.4 is because since 5.4 there is BTF/CO-RE but some kernels "lies" with their version so it's not valuable to check it. Since kernel 4.4 there is eBPF so we can check that just in case but again, it's not too much valuable but it's more for us to have more debugging information, this is why we don't exit on the error but log it.
What do you think? @matthyx
Fine go ahead
Summary:
Overview