Struct libbpf_rs::Program

pub struct Program { /* fields omitted */ }

Represents a loaded Program.

This struct is not safe to clone because the underlying libbpf resource cannot currently be protected from data races.

If you attempt to attach a Program with the wrong attach method, the attach_* method will fail with the appropriate error.

Implementations

impl Program

pub fn name(&self) -> &str

pub fn section(&self) -> &str

Name of the section this Program belongs to.

pub fn prog_type(&self) -> ProgramType

pub fn fd(&self) -> i32

Returns a file descriptor to the underlying program.

pub fn attach_type(&self) -> ProgramAttachType

pub fn pin<P: AsRef<Path>>(&mut self, path: P) -> Result<()>

Pin this program to bpffs.

pub fn unpin<P: AsRef<Path>>(&mut self, path: P) -> Result<()>

Unpin this program from bpffs

pub fn attach(&mut self) -> Result<Link>

Auto-attach based on prog section

pub fn attach_cgroup(&mut self, cgroup_fd: i32) -> Result<Link>

Attach this program to a cgroup.

pub fn attach_perf_event(&mut self, pfd: i32) -> Result<Link>

Attach this program to a perf event.

pub fn attach_uprobe<T: AsRef<str>>(
    &mut self,
    retprobe: bool,
    pid: i32,
    binary_path: T,
    func_offset: usize
) -> Result<Link>

Attach this program to a userspace probe.

pub fn attach_kprobe<T: AsRef<str>>(
    &mut self,
    retprobe: bool,
    func_name: T
) -> Result<Link>

Attach this program to a kernel probe.

pub fn attach_tracepoint<T: AsRef<str>>(
    &mut self,
    tp_category: T,
    tp_name: T
) -> Result<Link>

Attach this program to a kernel tracepoint.

pub fn attach_raw_tracepoint<T: AsRef<str>>(
    &mut self,
    tp_name: T
) -> Result<Link>

Attach this program to a raw kernel tracepoint.

pub fn attach_lsm(&mut self) -> Result<Link>

Attach to an LSM hook

pub fn attach_trace(&mut self) -> Result<Link>

Attach to a fentry/fexit kernel probe

pub fn attach_sockmap(&self, map_fd: i32) -> Result<()>

Attach a verdict/parser to a sockmap/sockhash