Observing All Kernel Functions: How Hard Could It Be?

Explore the challenges and possibilities of attaching observability tools to all Linux kernel functions simultaneously in this 35-minute conference talk from DevConf.CZ 2024. Delve into the current landscape of Linux kernel observability, examining tools like ftrace, BPF, and perf. Discover the potential impacts and limitations of attaching to nearly 80,000 kernel functions at once. Learn about the latest kernel contributions aimed at advancing this ambitious goal. Speaker Viktor Malik guides you through the complexities of kernel-wide function observation, discussing overhead concerns, potential crashes, and the evolving approaches different tools employ to tackle this task.

Observing all kernel functions: how hard could it be? - DevConf.CZ 2024