Powering Observability with Simple, Sharable, EBPF Programs

The presentation discusses the use of the open source bumblebee project to enable easy creation, running, and sharing of eBPF programs without writing any user-space code. Bumblebee harnesses Linux Kernel's observability data and allows users to focus on writing eBPF code while taking care of the user space component for them.

• Bumblebee is an open source project that simplifies the creation, running, and sharing of eBPF programs without requiring user-space code
• Bumblebee harnesses Linux Kernel's observability data and allows users to focus on writing eBPF code while taking care of the user space component for them
• Bumblebee supports vbpf compatible bpf code and provides a containerized building environment
• Bumblebee packages the eBPF program into the bumblebee oci image and creates the map for the program to interact with
• Bumblebee allows users to run local, remote, or third-party images as long as they trust them

The speaker explains that the user space code for eBPF programs can be complicated and time-consuming to write. Bumblebee simplifies this process by allowing users to focus on writing eBPF code while taking care of the user space component for them. Additionally, Bumblebee provides a containerized building environment and packages the eBPF program into the bumblebee oci image, making it easy to share and run the program. The speaker also notes that Bumblebee supports vbpf compatible bpf code and allows users to run local, remote, or third-party images as long as they trust them.

Have you tried to create and run your own eBPF programs? There are many popular frameworks out there for this exact purpose, and yet they still feel very complex. All of these frameworks require writing both user space, and kernel code. In this talk, we will present an innovative method to enable you to easily create, run, and share your eBPF programs without writing any user-space code. We will use the new open source bumblebee project (in the process of being donated to CNCF) to harness Linux Kernel’s observability data. With live-coding, we will explore what is happening to give you an understanding of how it works to write and run your eBPF program without writing your own user-space code with bumblebee.