Tracee-eBPF doesn't build

[itaysk]

❯ make build
mkdir -p dist/tracee.bpf
cp $(find tracee/tracee.bpf.c dist/libbpf/usr/include/bpf 3rdparty/include -type f) dist/tracee.bpf
GOOS=linux GOARCH=amd64 CC=clang CGO_CFLAGS="-I /home/itaysk/dev/tracee/tracee-ebpf/dist/libbpf/usr/include" CGO_LDFLAGS="/home/itaysk/dev/tracee/tracee-ebpf/dist/libbpf/libbpf.a" go build -v -o dist/tracee-ebpf \
-ldflags "-X main.version=v0.5.4-8-g05c11bf -X main.bpf_core="
github.com/aquasecurity/libbpfgo
# github.com/aquasecurity/libbpfgo
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1049:37: could not determine kind of name for C.BPF_TC_CUSTOM
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1047:37: could not determine kind of name for C.BPF_TC_EGRESS
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1055:26: could not determine kind of name for C.BPF_TC_F_REPLACE
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1046:37: could not determine kind of name for C.BPF_TC_INGRESS
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1152:9: could not determine kind of name for C.bpf_tc_attach
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1163:9: could not determine kind of name for C.bpf_tc_detach
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1133:9: could not determine kind of name for C.bpf_tc_hook_create
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1142:9: could not determine kind of name for C.bpf_tc_hook_destroy
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1174:9: could not determine kind of name for C.bpf_tc_query
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1098:12: could not determine kind of name for C.sizeof_struct_bpf_tc_hook
../../../.asdf/installs/golang/1.16.2/packages/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1075:12: could not determine kind of name for C.sizeof_struct_bpf_tc_opts
make: *** [Makefile:51: dist/tracee-ebpf] Error 2

[yanivagman]

Try make clean

[itaysk]

thanks!

[mtcherni95]

I get the same error when updating libbpfgo module in my app. any suggestion?

go get github.com/aquasecurity/libbpfgo
# github.com/aquasecurity/libbpfgo
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1049:37: could not determine kind of name for C.BPF_TC_CUSTOM
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1047:37: could not determine kind of name for C.BPF_TC_EGRESS
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1055:26: could not determine kind of name for C.BPF_TC_F_REPLACE
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1046:37: could not determine kind of name for C.BPF_TC_INGRESS
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1152:9: could not determine kind of name for C.bpf_tc_attach
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1163:9: could not determine kind of name for C.bpf_tc_detach
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1133:9: could not determine kind of name for C.bpf_tc_hook_create
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1142:9: could not determine kind of name for C.bpf_tc_hook_destroy
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1174:9: could not determine kind of name for C.bpf_tc_query
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1098:12: could not determine kind of name for C.sizeof_struct_bpf_tc_hook
../../../../go/pkg/mod/github.com/aquasecurity/[email protected]/libbpfgo.go:1075:12: could not determine kind of name for C.sizeof_struct_bpf_tc_opts

[yanivagman]

Have you tried make clean?

[mtcherni95]

yes, solved by updating libbpf.

[Dinakaranevil]

screen.log

not able to build from source
Distributor ID: Ubuntu
Description: Ubuntu 21.04
Release: 21.04
Codename:hirsute

kernel version :- 5.11.0-37-generic