Merge pull request #78 from coroot/tracefs

require either `debugfs` or `tracefs` to be mounted
coroot · Apr 30, 2024 · 58f0336 · 58f0336
2 parents 8b0243e + 4e9a6fc
commit 58f0336
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/ebpftracer/tracer.go b/ebpftracer/tracer.go
@@ -170,9 +170,11 @@ func (t *Tracer) ebpf(ch chan<- Event) error {
 	if len(prg) == 0 {
 		return fmt.Errorf("unsupported kernel version: %s", t.kernelVersion)
 	}
+	_, debugFsErr := os.Stat("/sys/kernel/debug/tracing")
+	_, traceFsErr := os.Stat("/sys/kernel/tracing")
 
-	if _, err := os.Stat("/sys/kernel/debug/tracing"); err != nil {
-		return fmt.Errorf("kernel tracing is not available: %w", err)
+	if debugFsErr != nil && traceFsErr != nil {
+		return fmt.Errorf("kernel tracing is not available: debugfs or tracefs must be mounted")
 	}
 
 	collectionSpec, err := ebpf.LoadCollectionSpecFromReader(bytes.NewReader(prg))