CO-RE (Compile Once - Run Everywhere) technology is more than a year old now. It allows observing systems’ structs through eBPF without installing kernel headers (kernel-devel package) & recompiling tools on every machine. It’s done by including premade & compressed debugging info directly into the kernel. This procedure requires compiling with the flag “CONFIG_DEBUG_INFO_BTF=y” enabled, and a kernel’s size increases only roughly up to 1.5 MB.
BPF is the future of Linux observability tooling, and CO-RE has incredibly reduced an overhead. Would it be possible to include the previously mentioned flag into Manjaro’s kernel building process?
More info here (remove spaces):
facebookmicrosites. github. io/bpf/blog/2020/02/19/bpf-portability-and-co-re.html