On 3/31/20 3:51 PM, Edward Cree wrote: > On 31/03/2020 04:54, Andrii Nakryiko wrote: >> No need to kill random processes, you can kill only those that hold >> bpf_link FD. You can find them using drgn tool with script like [0]. > For the record, I find the argument "we don't need a query feature, > because you can just use a kernel debugger" *utterly* *horrifying*. > Now, it seems to be moot, because Alexei has given other, better > reasons why query doesn't need to land yet; but can we please not > ever treat debugging interfaces as a substitute for proper APIs? > > </scream> > -ed > just about to send the same intent. Dev packages and processing /proc/kcore is not a proper observability API for production systems.