bpftrace - trigger for syscall not working (at Raspberry Pi 4)
Package Information
- Package name: bpftrace
- Package version: 0.19.1-r1
- Alpine version: 3.19.1
- Alpine architecture: aarch64
Summary
bpftrace outputs an error message "tracepoint not found" if you use a syscall tracepoint like "sys_enter_kill".
Steps to reproduce
install package "bpftrace" download and run example file as root: https://raw.githubusercontent.com/bpftrace/bpftrace/master/tools/killsnoop.bt You will get the following message: ./killsnoop.bt:23-25: ERROR: tracepoint not found: syscalls:sys_enter_kill
Hint: The project bpftrace mentions a script to check required kernel features. When I run it and use the file "/boot/config-rpi" as input I get the following output. I'm doing this on a rasperry pi 4. Can someone adjust the kernel parameters?
./check_kernel_features.sh Required option CONFIG_FTRACE_SYSCALLS not set Required option CONFIG_FUNCTION_TRACER not set Required option CONFIG_DYNAMIC_FTRACE not set Required option CONFIG_UPROBES not set Required option CONFIG_UPROBE_EVENTS not set Missing required features