From c3080258750b0eee612c24d4d4bffe42473ce05b Mon Sep 17 00:00:00 2001 From: Julia Kartseva Date: Fri, 27 Nov 2020 17:54:02 -0800 Subject: readme: update README with requirements for bpf --- README | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) (limited to 'README') diff --git a/README b/README index e0b7fbf8bf..955dc11e1b 100644 --- a/README +++ b/README @@ -35,6 +35,10 @@ LICENSE: REQUIREMENTS: Linux kernel >= 3.13 Linux kernel >= 4.2 for unified cgroup hierarchy support + Linux kernel >= 4.10 for cgroup-bpf egress and ingress hooks + Linux kernel >= 4.15 for cgroup-bpf device hook + Linux kernel >= 4.17 for cgroup-bpf socket address hooks + Linux kernel >= 5.3 for bounded-loops in BPF program Linux kernel >= 5.4 for signed Verity images support Kernel Config Options: @@ -95,8 +99,20 @@ REQUIREMENTS: Required for CPUQuota= in resource control unit settings CONFIG_CFS_BANDWIDTH - Required for IPAddressDeny= and IPAddressAllow= in resource control + Required for IPAddressDeny=, IPAddressAllow=, IPIngressFilterPath=, + IPEgressFilterPath= in resource control unit settings unit settings + CONFIG_BPF + CONFIG_BPF_SYSCALL + CONFIG_BPF_JIT + CONFIG_HAVE_EBPF_JIT + CONFIG_CGROUP_BPF + + Required for SocketBind{Allow|Deny}= in resource control unit settings + CONFIG_BPF + CONFIG_BPF_SYSCALL + CONFIG_BPF_JIT + CONFIG_HAVE_EBPF_JIT CONFIG_CGROUP_BPF For UEFI systems: @@ -154,6 +170,7 @@ REQUIREMENTS: libcryptsetup (optional), >= 2.3.0 required for signed Verity images support libaudit (optional) libacl (optional) + libbpf >= 0.2.0 (optional) libfdisk >= 2.33 (from util-linux) (optional) libselinux (optional) liblzma (optional) @@ -178,6 +195,8 @@ REQUIREMENTS: meson >= 0.46 (>= 0.49 is required to build position-independent executables) ninja gcc, awk, sed, grep, m4, and similar tools + clang >= 10.0, llvm >= 10.0 (optional, required to build BPF programs + from source code in C) During runtime, you need the following additional dependencies: -- cgit v1.2.1