Powering Observability with Simple, Sharable, EBPF Programs
summary
Bumblebee provides a containerized build environment (LLVM/clang + BPF headers on Debian) that compiles C eBPF into bytecode, packages it as an OCI image, and runs it with a loader that creates maps, uses a ring buffer for events, and exports metrics/logs to Prometheus. Demo detects Linux OOM-kill events inside Kubernetes by deploying a daemonset and a memory‑leak pod; observation shows 32,768 pages (~131 MB) exceed a 128 MB limit and trigger OOM kills, confirming the pipeline works end to end.
AI-written summary · about
chapters (8)
- 0:00Start
- 2:46Containerized Building Environments
- 5:01Writing Ebpf Programs with Bumblebee
- 9:26Starting a Kubernetes Cluster
- 13:59Download Bumblebee
- 16:16Bumblebee Ui
- 16:34Create a Demon Set
- 19:33Port Forwarding
related talks
35mBumbleBee: Or How I Learned To Stop Worrying And Love eBPF - Krisztian Fekete
01h 02mTutorial: Create Your First EBPF Program to Monitor Your System Using Bumblebee
29mKubernetes Observability with eBPF
36mBumbleBee: Or How I Learned To Stop Worrying And Love eBPF
32mExploring the Power of eBPF for System Observability
34mStep by Step Kubernetes Observability with eBPF
27mLow-Overhead Tracing Using eBPF for Observability into Kubernetes Apps and Services
31meBPF for Observability: The Good, the Bad, and the Ugly