Tag
The Linux kernel is set to support $ORIGIN for relocatable binaries via eBPF and binfmt_misc, enabling Nix and similar tools to select interpreters programmatically.
This paper presents ActPlane, a policy engine that enforces safety and effectiveness policies for AI agents at the OS kernel level using eBPF, bridging the semantic gap between natural language policy intent and concrete system actions.
zeroserve now supports Caddy-compatible mode, achieving 3x throughput and 70% lower latency by JIT-compiling Caddyfiles to eBPF and native machine code.
José Marchesi and the GCC-BPF team provided an update on BPF support in GCC 16, highlighting progress toward feature parity with LLVM and increasing pass rate of the kernel's BPF self-tests.
This article explores surprising uses of bytecode virtual machines, specifically eBPF in the Linux kernel and DWARF expressions for debug information in compiled binaries.
Gobee is a tool that transpiles a subset of Go into BPF C, allowing developers to write eBPF programs in Go instead of C. It generates typed Go bindings for userspace and uses clang's backend for compilation.
guardd is an open-source Linux endpoint detection tool that uses eBPF events and Isolation Forest to spot anomalous process/network behavior in 60-second windows, but struggles with browser-related false positives.
Frappe Cloud investigated recurring database freezes affecting thousands of hosted sites by using eBPF tracing to monitor disk I/O at the kernel level, discovering a suspicious query pattern that triggered the incidents.