go-ebpf-logger

The golang code that actually runs the file monitor ebpf code

Pre-requisite

Install golang, visit link

Install goreleaser, visit link

Install gh, visit link

Screenshots

It works!

Run it on Local

Get file monitor binary from the repo

Put the version accordingly here in the below command at vX.Y.Z

gh release download vX.Y.Z --repo SentinalFS/file-monitor --pattern "monitor.bpf.o"

Run it

sudo go run main.go

Run it on docker

Get file monitor binary from the repo

Put the version accordingly here in the below command at vX.Y.Z

gh release download vX.Y.Z --repo SentinalFS/file-monitor --pattern "monitor.bpf.o"

Run go releaser on local

goreleaser release --snapshot --skip=publish --clean

Build it

docker build --build-arg TARGETARCH=amd64 -t go-ebpf-logger -f Dockerfile.amd64 .

Run it

sudo docker run --rm -it --privileged  -v /sys/fs/bpf:/sys/fs/bpf:rw go-ebpf-logger