EBPF Superpowers

Explore the powerful capabilities of eBPF (Berkeley Packet Filter) in this 42-minute conference talk by Liz Rice from Aqua Security. Dive into the explosion of tools and capabilities that have emerged since Brendan Gregg's description of eBPF as "Superpowers for Linux" three years ago. Learn how to leverage eBPF technology, particularly in the context of containers, through demo-rich presentations. Discover topics such as BCC, attaching events, tracing, maps, userspace interaction, helper functions, verification, set comprehension, and Landlock. Gain insights into the practical applications and potential of eBPF for enhancing Linux systems and container environments.

Intro
Welcome
Agenda
BCC
Other Events
Attaching Events
Tracing
Maps
Userspace
Map
BCC helper functions
Verification
Superpowers
Set Comp
Landlock
References