https://lead-devops.blackdevhub.online/tags/bpf/Recent content in Bpf on Lead DevOpsHugoru-RUMon, 07 Sep 2026 00:00:00 +0000https://lead-devops.blackdevhub.online/posts/bpftrace-one-liners-replace-strace/Mon, 07 Sep 2026 00:00:00 +0000https://lead-devops.blackdevhub.online/posts/bpftrace-one-liners-replace-strace/<p>strace подвешивает процесс при каждом syscall. На live-сервере с 2000 RPS это означает таймауты и alerts. bpftrace работает через eBPF в ядре — трассировка идёт параллельно, без остановки процессов. Разница в накладных расходах — на порядки.</p> <h2 id="установка">Установка </h2> <div class="td-code td-code--untitled" id="td-code-8ab7156d-fence-0" data-td-code data-td-code-auto-id data-td-language="bash" data-td-line-count="11"> <div class="td-code__viewport" id="td-code-8ab7156d-fence-0-viewport" data-td-code-viewport><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># Debian / Ubuntu</span> </span></span><span class="line"><span class="cl">sudo apt install bpftrace </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># RHEL / CentOS / Fedora</span> </span></span><span class="line"><span class="cl">sudo dnf install bpftrace </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># Arch</span> </span></span><span class="line"><span class="cl">sudo pacman -S bpftrace </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># Проверка</span> </span></span><span class="line"><span class="cl">sudo bpftrace -V</span></span></code></pre></div></div> </div> <p>Для полного набора probe-ов нужны debug symbols:</p>