This is a hands-on eBPF tutorial designed to help developers master eBPF programming from basic concepts to advanced techniques. Each lesson includes detailed explanations, complete code examples, and practical exercises.

• eBPF Fundamentals: Understanding eBPF architecture and core concepts
• Hook Mechanisms: Kprobe, Uprobe, Tracepoint, and Raw Tracepoint
• Data Structures: Maps, Ring Buffers, and Perf Buffers
• Multi-Language Development: C and Go development with eBPF
• Advanced Topics: BTF, CO-RE, and cross-kernel compatibility

1. Clone the Repository

   This project contains Git submodules. You can clone it using one of the following methods:

   Method 1: Clone with submodules initialized

   git clone --recursive https://github.com/haolipeng/ebpf-tutorial.git

   Method 2: Clone and initialize submodules separately

   # First, clone the main repository
   git clone https://github.com/haolipeng/ebpf-tutorial.git
   cd ebpf-tutorial
   
   # Then, initialize and update submodules
   git submodule update --init

2. Prerequisites

   • Linux kernel >= 5.4 (5.8+ recommended for Ring Buffer)
   • Basic knowledge of C programming
   • Understanding of Linux system programming

3. Development Environment

   • Install libbpf, bpftool, and related tools
   • For Go development: Go 1.18+

ebpf-tutorial/
├── Makefile                    # Top-level entry point
├── build/                      # Build system configuration
│   ├── config.mk               # Configurable options (toolchain, paths)
│   ├── common.mk               # Common variables and functions
│   └── rules.mk                # Common build rules (BPF compilation)
├── src/                        # Example source code
│   ├── Makefile                # Manages sub-projects
│   ├── helloworld/             # Lesson 1 example
│   ├── kprobe/                 # Lesson 2 example
│   └── ...                     # More examples
├── libbpf/                     # libbpf submodule
├── bpftool/                    # bpftool submodule
├── vmlinux/                    # Kernel type headers
└── .output/                    # Build output directory (auto-generated)

# View available commands
make help

# First time: prebuild dependencies
make prebuild

# Build all examples
make all

# (Optional) Generate vmlinux.h from current kernel
make vmlinux

Available Commands:

1. Start Learning
   • Begin with Lesson 1: Hello World
   • Follow the lessons in order for best results

Contributions are welcome! Feel free to:

• Report issues or bugs
• Suggest improvements
• Submit pull requests
• Share your learning experience

This tutorial is open source and available for educational purposes.