Hi, here are my notes from the bpf office hours today. Does it sound as what we discussed? Steps to add incremental support to global vars: 1. teach libbpf to replace "ld_imm64 rX, foo" with absolute address of var "foo" by reading that value from kallsyms. >From the verifier point of view ld_imm64 instruction will look like it's assigning large constant into a register. The bpf prog would need to use bpf_probe_read_kernel() to further access vars. 2. teach pahole to store ' A ' annotated kallsyms into vmlinux BTF as BTF_KIND_VAR. There are ~300 of them, so should be minimal increase in size. 3. teach libbpf to scan vmlinux BTF for vars and replace "ld_imm64 rX, foo" with BPF_PSEUDO_BTF_ID. >From the verifier point of view 'ld_imm64 rX, 123 // pseudo_btf_id' will be similar to ld_imm64 with pseudo_map_fd and pseudo_map_value. The verifier will check btf_id and replace that with actual kernel address at program load time. It will also know that exact type of 'rX' from there on. That gives big performance win since bpf prog will be able to use direct load instructions to access vars. 4. add bpf_per_cpu(var, cpu) helper. It will accept 'var' in R1 and the verifier will enforce that R1 is PTR_TO_BTF_ID type and it's BTF_KIND_VAR and it's in per-cpu datasec. The return value from that helper will be normal PTR_TO_BTF_ID, so subsequent load instruction can use it directly. Would be nice to have this helper without BTF requirement, but I don't see how to make it safe without BTF at the moment. Similarly bpf_this_cpu_ptr(var) helper could be necessary or we may fold it into cpu == BPF_F_CURRENT_CPU as a single helper.
