Struct KernelCapabilities 

pub struct KernelCapabilities {
    pub supports_ringbuf: bool,
    pub supports_perf_event_array: bool,
    pub supports_ns_current_pid_tgid_helper: bool,
}

Kernel eBPF capabilities detection

Fields

supports_ringbuf: bool

Whether the kernel supports BPF_MAP_TYPE_RINGBUF (requires >= 5.8)

supports_perf_event_array: bool

Whether the kernel supports BPF_MAP_TYPE_PERF_EVENT_ARRAY (requires >= 4.3)

supports_ns_current_pid_tgid_helper: bool

Whether bpf_get_ns_current_pid_tgid helper is supported for kprobe/uprobe class programs.

Implementations

impl KernelCapabilities

pub fn detect_for_startup( force_perf_event_array: bool, ) -> Result<Self, KernelCapabilityError>

Detect kernel capabilities for process startup, including startup-oriented logs and user-facing error context.

pub fn get() -> Result<Self, KernelCapabilityError>

Get global kernel capabilities (detected once on first cacheable call) Returns an error if neither RingBuf nor PerfEventArray support can be verified.

pub fn get_perf_only() -> Result<Self, KernelCapabilityError>

Detect kernel capabilities with PerfEventArray-only startup semantics. This intentionally bypasses the global cache because force-perf mode is a runtime policy override, not the kernel’s complete hardware capability set.

pub fn ringbuf_supported() -> bool

Check if RingBuf is supported (convenience method)

pub fn perf_event_array_supported() -> bool

Check if PerfEventArray is supported (convenience method)

pub fn ns_current_pid_tgid_helper_supported() -> bool

Check if bpf_get_ns_current_pid_tgid helper is supported.

Trait Implementations

impl Clone for KernelCapabilities

fn clone(&self) -> KernelCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for KernelCapabilities

impl Debug for KernelCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KernelCapabilities

impl PartialEq for KernelCapabilities

fn eq(&self, other: &KernelCapabilities) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KernelCapabilities