News for hackers. Stuff that matters.

forxtrot

Ask HN: Runtime Information about Dependencies

To answer questions about a dependency such as;- Does this tries to make a network call ? - Does this tries to access files ? - Is there any deviation in behavior in recent versions ?Do you think this info will be helpful before doing pip install or npm install ?

( Read More... | no comments | on HN )
Re:Show HN: Code-snippets for developing eBPF Programs on Sunday August 17, 2025 @02:20AM (#44929343)
That's good point. I will add inline links. Thanks !

Show HN: Code-snippets for developing eBPF Programs

https://github.com/h0x0er/ebpf-snippets

When developing eBPF-programs, we need to figure correct program-section SEC() and program-context.Similary while creating eBPF-maps, we need to add certain fields such as; map-type, key/values, map_options etc..If you’re like me, you probably end up digging through documentation or browsing open-source projects just to piece this together every time.So, I created a vscode-extension to help...

( Read More... | 2 comments | 2 points | on HN )
Re:eBPF: Handling Events in Userspace on Friday July 25, 2025 @04:17PM (#44687918)
See the approaches used for handling eBPF-events in user-space by opensource projects.
Re:eBPF: Connecting with Container Runtimes on Friday July 11, 2025 @06:32AM (#44530556)
Thanks for giving the context.
Re:eBPF: Connecting with Container Runtimes on Friday July 11, 2025 @03:00AM (#44529120)
The snippets are taken from cilium/tetragon, aquasecurity/tracee and crictl as mentioned in the post.

The post doesn't covers these projects in depth, instead act as a quick reference to the parts, where connection with CRI is being made and used for enrichment.

I understand there are more better ways to do the thing.

P.S: Post is a collection of my memories, when I was implementing the functionality. So just wanted to share, in hope that, maybe it will help others as well. Thanks !

Re:eBPF: Connecting with Container Runtimes on Friday July 11, 2025 @01:54AM (#44528780)
No A.I, just H.I (Human Intelligence) :).
Re:eBPF: Connecting with Container Runtimes on Friday July 11, 2025 @01:15AM (#44528618)
Correct no eBPF-code is directly involved. As post explores eBPF-based tools for understanding user-space connection with container-runtime and enrichment of event once received from kernel-space.