bpftool-cgroup(8) System Manager's Manual bpftool-cgroup(8) (NAME) bpftool-cgroup - bpf cgroup (SYNOPSIS) bpftool [OPTIONS] cgroup COMMAND OPTIONS := { { -j | --json } [{ -p | --pretty }] | { -d | --debug } | { -f | --bpffs } } COMMANDS := { show | list | tree | attach | detach | help } CGROUP (CGROUP COMMANDS) bpftool cgroup { show | list } CGROUP [effective] bpftool cgroup tree [CGROUP_ROOT] [effective] bpftool cgroup attach CGROUP ATTACH_TYPE PROG [ATTACH_FLAGS] bpftool cgroup detach CGROUP ATTACH_TYPE PROG bpftool cgroup help PROG := { id PROG_ID | pinned FILE | tag PROG_TAG | name PROG_NAME } ATTACH_TYPE := { cgroup_inet_ingress | cgroup_inet_egress | cgroup_inet_sock_create | cgroup_sock_ops | cgroup_device | cgroup_inet4_bind | cgroup_inet6_bind | cgroup_inet4_post_bind | cgroup_inet6_post_bind | cgroup_inet4_connect | cgroup_inet6_connect | cgroup_unix_connect | cgroup_inet4_getpeername | cgroup_inet6_getpeername | cgroup_unix_getpeername | cgroup_inet4_getsockname | cgroup_inet6_getsockname | cgroup_unix_getsockname | cgroup_udp4_sendmsg | cgroup_udp6_sendmsg | cgroup_unix_sendmsg | cgroup_udp4_recvmsg | cgroup_udp6_recvmsg | cgroup_unix_recvmsg | cgroup_sysctl | cgroup_getsockopt | cgroup_setsockopt | cgroup_inet_sock_release } ATTACH_FLAGS := { multi | override } (DESCRIPTION) bpftool cgroup { show | list } CGROUP [effective] cgroup CGROUP. (program ID) . effective (effective) cgroup . . bpftool cgroup tree [CGROUP_ROOT] [effective] cgroup CGROUP_ROOT . CGROUP_ROOT bpftool (mountpoint) cgroup v2 . cgroup show/list : cgroup . effective cgroup . . bpftool cgroup attach CGROUP ATTACH_TYPE PROG [ATTACH_FLAGS] PROG cgroup CGROUP ATTACH_TYPE ATTACH_FLAGS . ATTACH_FLAGS : override -cgroup bpf cgroup -cgroup multi -cgroup bpf cgroup cgroup . cgroup override . . cgroup multi . (FIFO) ( ). ATTACH_FLAGS . . ATTACH_TYPE : o ingress inet ( .) o egress inet ( .) o sock_create inet ( .) o sock_ops ( .) o device ( .) o bind4 bind(2) inet4 ( .) o bind6 bind(2) inet6 ( .) o post_bind4 bind(2) inet4 ( .) o post_bind6 bind(2) inet6 ( .) o connect4 connect(2) inet4 ( .) o connect6 connect(2) inet6 ( .) o connect_unix connect(2) unix ( .) o sendmsg4 sendto(2) sendmsg(2) sendmmsg(2) udp4 ( .) o sendmsg6 sendto(2) sendmsg(2) sendmmsg(2) udp6 ( .) o sendmsg_unix sendto(2) sendmsg(2) sendmmsg(2) unix ( .) o recvmsg4 recvfrom(2) recvmsg(2) recvmmsg(2) udp4 ( .) o recvmsg6 recvfrom(2) recvmsg(2) recvmmsg(2) udp6 ( .) o recvmsg_unix recvfrom(2) recvmsg(2) recvmmsg(2) unix ( .) o sysctl sysctl ( .) o getsockopt getsockopt ( .) o setsockopt setsockopt ( .) o getpeername4 getpeername(2) inet4 ( .) o getpeername6 getpeername(2) inet6 ( .) o getpeername_unix getpeername(2) unix ( .) o getsockname4 getsockname(2) inet4 ( .) o getsockname6 getsockname(2) inet6 ( .) o getsockname_unix getsockname(2) unix ( .) o sock_release inet ( .) bpftool cgroup detach CGROUP ATTACH_TYPE PROG PROG cgroup CGROUP ATTACH_TYPE. bpftool prog help . (OPTIONS) -h, --help ( bpftool help). -V, --version bpftool ( bpftool version) libbpf bpftool . LLVM libbfd JIT (bpftool prog dump jited) BPF ( bpftool prog profile pid BPF ). -j, --json JSON. JSON . -p, --pretty JSON . -j . -d, --debug (debug). libbpf (verifier) . -f, --bpffs (pinned). (EXAMPLES) # mount -t bpf none /sys/fs/bpf/ # mkdir /sys/fs/cgroup/test.slice # bpftool prog load ./device_cgroup.o /sys/fs/bpf/prog # bpftool cgroup attach /sys/fs/cgroup/test.slice/ device id 1 allow_multi # bpftool cgroup list /sys/fs/cgroup/test.slice/ ID AttachType AttachFlags Name 1 device allow_multi bpf_prog1 # bpftool cgroup detach /sys/fs/cgroup/test.slice/ device id 1 # bpftool cgroup list /sys/fs/cgroup/test.slice/ ID AttachType AttachFlags Name (SEE ALSO) bpf(2), bpf-helpers(7), bpftool(8), bpftool-btf(8), bpftool-feature(8), bpftool-gen(8), bpftool-iter(8), bpftool-link(8), bpftool-map(8), bpftool-net(8), bpftool-perf(8), bpftool-prog(8), bpftool-struct_ops(8), bpftool-token(8) bpftool-cgroup(8)