Note

I have created two repositories cloudlab-tools and cloudlab-ebpf. The cloudlab-tools repository is for some essential commands for setting up the cloudlab server for the application needs, and the cloudlab-ebpf repository uses cloudlab-tools as a submodule and implements additional functionality for ebpf. It also contains some experiments executed on cloudlab.

Goal

1. write an eBPF program which will be triggered once a process calls execve
2. log the process id, timestamp, and the target of execve

NOTE: these steps are written down after finally being able to execute the code. I have not included logs for all the iterations of the code, but I’ll point out the relevant information.

Setting up CloudLab

1. Created a cloudlab experiment using the small-lan profile.

   rutu_sh@node0:~$ uname -r
   5.15.0-86-generic
   rutu_sh@node0:~$ uname -a
   Linux node0.rutu-ebpf-test.gwcloudlab-pg0.wisc.cloudlab.us 5.15.0-86-generic #96-Ubuntu SMP Wed Sep 20 08:23:49 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
   

2. Cloned the rutu-sh/cloudlab-ebpf repository locally

   git clone --recurse-submodules <https://github.com/rutu-sh/cloudlab-ebpf.git>
   

3. Initiated the cloudlab env locally (this creates a .cloudlab folder with cloudlab_config.mk file inside)

   make cl-setup
   

   In the .cloudlab/cloudlab_config.mk file, specified the parameters SSH_KEY_PATH (local path to ssh private key for cloudlab), CLOUDLAB_USERNAME, and the value of NODE_0 set to c220g2-011122.wisc.cloudlab.us. All these values were taken from the cloudlab experimentation page.

4. Executed the following command locally (this copied the code from local to the path ~/src/cloudlab-ebpf in the Cloudlab server)

   make cl-sync-code NODE=NODE_0
   

5. Opened another terminal (terminal-b) and ssh’d into Cloudlab. This did an ssh into the cloudlab server.

   make cl-ssh-host NODE=NODE_0
   

6. In the cloudlab server (terminal-b), ran the following commands

   cd ~/src/cloudlab-ebpf/
   

   make
   

   source ~/.profile
   

7. Locally, wrote the eBPF C code and the gen.go file.

   • tracepoint.c
   • Notes
   • gen.go

8. Then ran the following command

   make go-generate-exp NODE=NODE_0 EXPERIMENT=simple-tracepoint-hook
   

   This synced the code to the cloudlab server and ran go generate on the server, then it copied the generated .go and .o files from the server to local for further development in the local environment.