QUARK-BTF(8) System Manager's Manual QUARK-BTF(8)

quark-btf — query quark BTF offsets

quark-btf [-bv] [-f btf_file] [targets ...]

quark-btf [-bv] -l version

quark-btf [-v] -g btf_file name version

quark-btf -V

The quark-btf program prints out the kernel structures offsets used by quark.

If operands are given, the output is curbed for those specified targets. The exit status is the number of failed targets.

The options are as follows:

Also print the offset in bits.
btf_file
Print all offsets quark would use from btf_file.
btf_file name version
Generate the internal btf C structure used by quark.
btf_file
is a the path to the btf.
name
is a human identifier, like ubuntu-22.
version
is the kernel version as returned by .
This option only used to generate btfhub.c via genbtf.sh, chances are you'll never need this.
version
Lookup the kernel in the compiled btfhub table from quark and print which kernel quark would use. Matching can be partial.
Increase , can be issued multiple times.
Print version and exit.

quark-btf exits with 1 if it can't resolve all BTF symbols, 0 otherwise.

Running:

$ quark-btf

outputs:

cred.cap_ambient             80
cred.cap_bset                72
cred.cap_effective           64
cred.cap_inheritable         48
cred.cap_permitted           56
cred.egid                    28
cred.euid                    24
cred.gid                     12
cred.sgid                    20
cred.suid                    16
cred.uid                     8
cred.user                    136
dentry.d_name.name           40
dentry.d_parent              24
fs_struct.pwd.dentry         48
fs_struct.pwd.mnt            40
fs_struct.root.dentry        32
mm_struct.(anon).start_stack 368
mount.mnt                    32
mount.mnt_mountpoint         24
task_struct.comm             3008
task_struct.cred             2992
task_struct.exit_code        2364
task_struct.fs               3056
task_struct.mm               2336
task_struct.pid              2464
task_struct.start_boottime   2816
task_struct.tgid             2468
vfsmount.mnt_root            0

quark_event_dump(3), quark_process_lookup(3), quark_queue_block(3), quark_queue_close(3), quark_queue_get_epollfd(3), quark_queue_get_events(3), quark_queue_get_stats(3), quark_queue_open(3), quark-mon(8)

October 14, 2024 Linux