Struct KernelCapabilities 

pub struct KernelCapabilities {
    pub supports_ringbuf: bool,
    pub supports_perf_event_array: bool,
    pub supports_ns_current_pid_tgid_helper: bool,
}

Kernel eBPF capabilities detection

Fields

supports_ringbuf: bool

Whether the kernel supports BPF_MAP_TYPE_RINGBUF (requires >= 5.8)

supports_perf_event_array: bool

Whether the kernel supports BPF_MAP_TYPE_PERF_EVENT_ARRAY (requires >= 4.3)

supports_ns_current_pid_tgid_helper: bool

Whether bpf_get_ns_current_pid_tgid helper is supported for kprobe/uprobe class programs.

Implementations

impl KernelCapabilities

pub fn detect_for_startup( force_perf_event_array: bool, ) -> Result<&'static Self, KernelCapabilityError>

Detect kernel capabilities for process startup, including startup-oriented logs and user-facing error context.

pub fn get() -> Result<&'static Self, KernelCapabilityError>

Get global kernel capabilities (detected once on first call) Returns an error if neither RingBuf nor PerfEventArray is supported

pub fn get_perf_only() -> Result<&'static Self, KernelCapabilityError>

Get kernel capabilities with PerfEventArray-only detection (for testing mode) Skips RingBuf detection and only validates PerfEventArray support Returns an error if PerfEventArray is not supported

pub fn ringbuf_supported() -> bool

Check if RingBuf is supported (convenience method)

pub fn perf_event_array_supported() -> bool

Check if PerfEventArray is supported (convenience method)

pub fn ns_current_pid_tgid_helper_supported() -> bool

Check if bpf_get_ns_current_pid_tgid helper is supported.

Trait Implementations

impl Clone for KernelCapabilities

fn clone(&self) -> KernelCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Copy for KernelCapabilities