eCHO Episode 195: Clang-free: runtime config for Cilium & eBPF скачать в хорошем качестве

eCHO Episode 195: Clang-free: runtime config for Cilium & eBPF

Join Liz Rice and Dylan Reimerink for a look at the clang-free runtime config for Cilium and eBPF. Liz and Dylan highlight work being done to remove the LLVM compilation toolchain from the Cilium agent runtime image and ship prebuilt eBPF ELFs embedded in the agent binary. This is an important step towards shipping a distro-less container image. Show notes: https://hackmd.io/wngA7JzPRPmqq4GkXj12kA 0:00 - Introduction & Cilium User Survey Request 1:59 - Topic Overview: Making Cilium Clang-Free 3:08 - Why Cilium Ships with Clang Compiler 5:15 - eBPF Verifier Contstraints 8:34 - Security POV 10:25 - Build-Time vs Runtime Configuration 11:08 - Demo: Traffic Control Filter Example 20:16 - Verifier Optimization & Dead Code Elimination 26:38 - Cilium Implementation Examples 32:38 - Refactoring Work & Code Changes 36:02 - Map Reference Counting Challenge 39:41 - Reachability Analysis Solution 44:00 - How Other Projects Can Use This Approach 51:03 - Remaining Challenges: Map Sizing 56:22 - Closing Remarks & Timeline