{"guid":"a12dc80f-bbf8-5228-bd73-9afbfcaefea4","title":"eBPF Data Collection for Everyone – empowering the community to obtain Linux insights using Inspektor Gadget","subtitle":null,"slug":"all-systems-go-2024-287-ebpf-data-collection-for-everyone-empowering-the-community-to-obtain-linux-insights-using-inspektor-gadget","link":"https://cfp.all-systems-go.io/all-systems-go-2024/talk/PVGU77/","description":"In this presentation we show how eBPF programmers can easily distribute their programs using Inspektor Gadget, a tool designed for the creation, deployment, and execution of eBPF programs (gadgets) across Kubernetes and Linux environments. Inspektor Gadget encapsulates eBPF programs into OCI containers, providing well-understood and easily distributable units.  We then detail how an end user can use Inspektor Gadget to easily derive valuable systems insights.\n\nWe'll give a brief overview of Inspektor Gadget's automatic data enrichment process, transforming complex kernel information into high-level, understandable concepts tied to Kubernetes and container runtimes. This feature bridges the knowledge gap between raw, low-level data and more interpretable information, improving the understanding of system behavior.\nWe will explain how users can write their own gadgets and make use of different helper APIs provided by Inspektor Gadget for socket enricher, file path discovery and container filtering, etc.\nWe will show how to combine existing gadgets into a new one, add additional post-processing logic  using WASM or Lua and export the resulting data to different targets, using for example OpenTelemetry.\nThroughout the talk, we'll demonstrate more of Inspektor Gadget's features, its support across various environments, discuss its operational mechanics, and share insights into the future direction of the project.\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/de/","original_language":"eng","persons":["Alban Crequy","Michael Friese"],"tags":["287","asg2024","Dome","2024","Day 1"],"view_count":85,"promoted":false,"date":"2024-09-25T11:15:00.000+02:00","release_date":"2024-09-25T00:00:00.000+02:00","updated_at":"2025-11-11T09:45:03.268+01:00","length":1923,"duration":1923,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/287-a12dc80f-bbf8-5228-bd73-9afbfcaefea4.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/287-a12dc80f-bbf8-5228-bd73-9afbfcaefea4_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/287-a12dc80f-bbf8-5228-bd73-9afbfcaefea4.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/287-a12dc80f-bbf8-5228-bd73-9afbfcaefea4.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/all-systems-go-2024-287-ebpf-data-collection-for-everyone-empowering-the-community-to-obtain-linux-insights-using-inspektor-gadget","url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_title":"All Systems Go! 2024","conference_url":"https://api.media.ccc.de/public/conferences/asg2024","related":[],"recordings":[{"size":67,"length":1923,"mime_type":"video/webm","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-09-25T14:57:03.797+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/webm-sd/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/80157","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":147,"length":1923,"mime_type":"video/webm","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-09-25T14:56:49.690+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/webm-hd/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/80156","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":50,"length":1923,"mime_type":"video/mp4","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-09-25T14:40:33.572+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/h264-sd/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_sd.mp4","url":"https://api.media.ccc.de/public/recordings/80150","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":29,"length":1923,"mime_type":"audio/mpeg","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-09-25T14:37:22.157+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/mp3/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/80147","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":18,"length":1923,"mime_type":"audio/opus","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-09-25T14:37:00.394+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/opus/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_opus.opus","url":"https://api.media.ccc.de/public/recordings/80146","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":146,"length":1923,"mime_type":"video/mp4","language":"eng","filename":"asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-09-25T14:36:46.376+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/h264-hd/asg2024-287-eng-eBPF_Data_Collection_for_Everyone_-_empowering_the_community_to_obtain_Linux_insights_using_Inspektor_Gadget_hd.mp4","url":"https://api.media.ccc.de/public/recordings/80145","event_url":"https://api.media.ccc.de/public/events/a12dc80f-bbf8-5228-bd73-9afbfcaefea4","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"}]}