◆ Category · 15 assets

EBPF

Browse 15 EBPF modes for AI coding agents — production-grounded, cited, installable. Part of the VIBE library.

🔎 Search within EBPF

cgroup

All cgroup programs attach to a cgroup directory and affect all sockets/processes within that cgroup (and its descendants unless overridden).

debugging

Use this file for runtime debugging, attach/load diagnosis, missing-event investigation, and host-level eBPF troubleshooting.

development

Use this file for build, loader, CO-RE, and day-to-day development setup guidance.

ebpf-skill

Practical guidance for choosing, writing, loading, and debugging eBPF programs. Prioritizes correct toolchain and hook selection, map choice, kernel-version fit, verifier triage, and concise production-ready examples using libbpf, ebpf-go, and bpftrace.

event-output

Used to stream structured data from kernel-space to userspace.

key-value

General-purpose maps for storing state in eBPF programs.

misc

Less common types used for program composition, kernel extension, and specialized hooks.

network

- For cross-kernel compatibility checks, see `workflows/testing.md`.

queue-stack-bloom

- For cross-kernel compatibility checks, see `workflows/testing.md`.

references

Use these when they directly help the user go deeper or unblock a specific issue.

specialized

Maps used for redirection, observability, object-lifetime state, and advanced shared memory patterns.

tail-calls-and-map-in-map

- For cross-kernel compatibility checks, see `workflows/testing.md`.

testing

Use this file for testing whether an eBPF object loads and attaches across multiple kernel versions.

tracing

- For cross-kernel compatibility checks, see `workflows/testing.md`.

verifier

Use this file for verifier failures, pointer-class reasoning, and constraint-aware program design.