kernel: disable BPF preload and bpfilter helpers #261
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Issue number:
Related: bottlerocket-os/bottlerocket-sdk#222
Description of changes:
The kernel build will automatically enable these helpers if it finds that the target C compiler can build a userspace program that depends on the C library. However, the helpers require additional libraries such as libelf which are not guaranteed to be present.
Since we don't make use of precompiled BPF programs, disable these config options rather than leaving it up to auto-detect.
Testing done:
With the current SDK that does not include glibc,
diff-kernel-config
reports no differences in the config files.With a custom SDK that does include glibc,
diff-kernel-config
reports these changes:Note that
CC_CAN_LINK
andCC_CAN_LINK_STATIC
will be set automatically because the more complete sys-roots allow the target C compiler to compile a test program.The other values are newly added and are set to "no" to prevent the kernel build from failing when
libelf
is not found, since that library is not present in the SDK's sys-roots.Terms of contribution:
By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.