On 2024/06/07 19:50, Quentin Monnet wrote:
> 2024-06-07 11:21 UTC+0100 ~ Kenta Tada <tadakentaso@xxxxxxxxx>
>> When CONFIG_NETKIT=y,
>> bpftool-cgroup shows error even if the cgroup's path is correct:
>>
>> $ bpftool cgroup tree /sys/fs/cgroup
>> CgroupPath
>> ID AttachType AttachFlags Name
>> Error: can't query bpf programs attached to /sys/fs/cgroup: No such device or address
>>
>> From strace and kernel tracing, I found netkit returned ENXIO and this command failed.
>> I think this AttachType(BPF_NETKIT_PRIMARY) is not relevant to cgroup.
>>
>> bpftool-cgroup should query just only cgroup-related attach types.
>>
>> v1->v2:
>> - used an array of cgroup attach types
>>
>> Signed-off-by: Kenta Tada <tadakentaso@xxxxxxxxx>
>> ---
>> tools/bpf/bpftool/cgroup.c | 38 +++++++++++++++++++++++++++++++++++---
>> 1 file changed, 35 insertions(+), 3 deletions(-)
>>
>> diff --git a/tools/bpf/bpftool/cgroup.c b/tools/bpf/bpftool/cgroup.c
>> index af6898c0f388..afab728468bf 100644
>> --- a/tools/bpf/bpftool/cgroup.c
>> +++ b/tools/bpf/bpftool/cgroup.c
>> @@ -19,6 +19,38 @@
>>
>> #include "main.h"
>>
>> +static const int cgroup_attach_types[] = {
>> + BPF_CGROUP_INET_INGRESS,
>> + BPF_CGROUP_INET_EGRESS,
>> + BPF_CGROUP_INET_SOCK_CREATE,
>> + BPF_CGROUP_INET_SOCK_RELEASE,
>> + BPF_CGROUP_INET4_BIND,
>> + BPF_CGROUP_INET6_BIND,
>> + BPF_CGROUP_INET4_POST_BIND,
>> + BPF_CGROUP_INET6_POST_BIND,
>> + BPF_CGROUP_INET4_CONNECT,
>> + BPF_CGROUP_INET6_CONNECT,
>> + BPF_CGROUP_UNIX_CONNECT,
>> + BPF_CGROUP_INET4_GETPEERNAME,
>> + BPF_CGROUP_INET6_GETPEERNAME,
>> + BPF_CGROUP_UNIX_GETPEERNAME,
>> + BPF_CGROUP_INET4_GETSOCKNAME,
>> + BPF_CGROUP_INET6_GETSOCKNAME,
>> + BPF_CGROUP_UNIX_GETSOCKNAME,
>> + BPF_CGROUP_UDP4_SENDMSG,
>> + BPF_CGROUP_UDP6_SENDMSG,
>> + BPF_CGROUP_UNIX_SENDMSG,
>> + BPF_CGROUP_UDP4_RECVMSG,
>> + BPF_CGROUP_UDP6_RECVMSG,
>> + BPF_CGROUP_UNIX_RECVMSG,
>> + BPF_CGROUP_SOCK_OPS,
>> + BPF_CGROUP_DEVICE,
>> + BPF_CGROUP_SYSCTL,
>> + BPF_CGROUP_GETSOCKOPT,
>> + BPF_CGROUP_SETSOCKOPT,
>> + BPF_LSM_CGROUP
>> +};
>> +
>> #define HELP_SPEC_ATTACH_FLAGS \
>> "ATTACH_FLAGS := { multi | override }"
>>
>> @@ -183,11 +215,11 @@ static int count_attached_bpf_progs(int cgroup_fd, enum bpf_attach_type type)
>>
>> static int cgroup_has_attached_progs(int cgroup_fd)
>> {
>> - enum bpf_attach_type type;
>> + unsigned int i = 0;
>> bool no_prog = true;
>>
>> - for (type = 0; type < __MAX_BPF_ATTACH_TYPE; type++) {
>> - int count = count_attached_bpf_progs(cgroup_fd, type);
>> + for (i = 0; i < ARRAY_SIZE(cgroup_attach_types); i++) {
>
>
> Thanks, it looks better that way.
>
>
>> + int count = count_attached_bpf_progs(cgroup_fd, cgroup_attach_types[i]);
>>
>> if (count < 0 && errno != EINVAL)
>
>
> I think the "errno != EINVAL" exception was here to allow iterating over
> unsupported attach types for the queries. Now that we only do supported
> types, we can probably remove it and return if "(count < 0)".
OK.
I'll fix it quickly.
Thanks!
>
>
>> return -1;
>
