lockc-project / lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)
https://lockc-project.github.io/
Apache License 2.0
218 stars 19 forks source link

Try to use aya only in userspce (as the 1st step) #135

Closed vadorovsky closed 2 years ago

vadorovsky commented 2 years ago

Rewriting lockc fully in Rust with Aya is a heavy task and we had a hard time doing it at once.

It should be possible to use Aya only in userspace and load eBPF programs written in C with it. That should make the transition easier, potentially allowing us to rewrite eBPF programs in chunks (programs sharing the same maps will have to be rewritten together).