2 个仓库
Awesome GitHub RepositoriesRuntime API Tracing
Tracing and inspection of container behavior by communicating with runtime APIs and sockets.
Distinct from Container Runtime Interfaces: Focuses on tracing and observability of the runtime rather than just the communication interface.
Explore 2 awesome GitHub repositories matching devops & infrastructure · Runtime API Tracing. Refine with filters or upvote what's useful.
Awesome Runtime API Tracing GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- cilium/tetragon
cilium/tetragon
4,753在 GitHub 上查看Tetragon 是一个基于 eBPF 的运行时安全和可观测性工具集，专为 Linux 和 Kubernetes 环境设计。它作为安全策略管理器、可观测性代理和执行引擎，通过 Hook 内核函数和跟踪点来检测权限提升、容器逃逸和未经授权的系统活动。 该项目的独特之处在于其执行实时内核内（in-kernel）强制执行的能力，允许在系统调用完成前同步终止恶意进程或修改函数返回值。它通过同步容器身份并将底层内核事件直接映射到 Pod 和命名空间，提供了深度的 Kubernetes 集成。 其更广泛的功能涵盖了全面的系统调用审计、网络连接跟踪和文件完整性监控。系统支持动态策略管理，并提供用于监控 BPF 性能和资源利用率的诊断工具。 部署支持通过 Helm Chart 在 Kubernetes 集群中进行，也支持通过独立容器和原生操作系统包进行部署。
Offers a programmatic interface to interrogate and update the internal runtime state of security agents.
C - inspektor-gadget/inspektor-gadget
inspektor-gadget/inspektor-gadget
2,720在 GitHub 上查看Inspektor Gadget is an eBPF observability toolset and program framework designed for tracing Linux systems and debugging Kubernetes nodes. It provides a suite of tools to collect kernel-level telemetry and export system metrics via the OpenTelemetry standard. The project distinguishes itself by packaging inspection tools as OCI-compliant container images, allowing for standardized distribution and deployment across clusters and hosts. It employs a modular data processing pipeline that utilizes WebAssembly modules to transform and filter telemetry, and leverages Compile Once Run Everywhere for
Inspects containers by communicating with runtime APIs and sockets across various container platforms.
Cbpfbpf-programscncf-project
