btf 开源项目推荐（28 个）

cilium /ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

aquasecurity /btfhub

BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for embedded BTF. This joint effort ensures that even kernels without built-in BTF support can effectively leverage the benefits of eBPF programs, promoting compatibility across various kernel versions.

Ayms /bitcoin-transactions

用于任何基于比特币的硬币的比特币协议的JavaScript实现，适用于服务器和浏览器内部。自己发现和管理硬币：简化标准或多重签名钱包的比特币交易，支持segwit和bech32，自己创建和发送比特币、比特币现金、Zcash、莱特币、DOGE、达世币等……

mas-bandwidth /xdp

XDP example programs

boratanrikulu /bpfvet

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage.

vobst /btf2json

Generate Volatility3 profiles from BTF.

trailofbits /btfparse

A C++ library that parses debug information encoded in BTF format

kenzok8 /vmlinux-btf

OpenWrt 固件补内核 BTF，vmlinux-btf

sbwml /kernel-latest-centos

Linux Kernel 6.18 LTS for CentOS 7

elerac /btf-rendering

Custom plugin in Python for BTF (Bidirectional Texture Function) rendering with Mitsuba 3

eunomia-bpf /bpf-compatible

compatible library for ebpf programs to improve BTF portability

jellyf1s /btf

该项目在 GitHub 上没有填写描述

yasindce1998 /Warmor

Warmor is a security enforcer that uses eBPF to monitor system calls and applies WebAssembly (WASM)-based policies for workload protection. It is designed to work across multiple platforms while leveraging eBPF for deep system visibility and WASM for portability.

multikernel /kbi

KBI packages Linux kernels and kernel-dependent artifacts as standard OCI images, enabling independent kernel lifecycle management, explicit compatibility guarantees, and reuse across environments.

Meowkis /ghostlock-samsung-research

ARM64 Android kernel research for the Samsung Galaxy S23 Ultra (SM-S918B)

genksome /kxray

Kernel offset extraction tool for Android boot images. Parses boot.img, extracts kernel, parses BTF, generates offsets.h.

copyleftdev /skbx

Agent-first Linux packet-path tracing with Rust/eBPF: bounded evidence, deterministic replay, and packet routes with receipts.

claudioscordino /ctracer

A gcc-based software tracer

danigoland /btf2go

Generate Go structs from BTF embedded in compiled eBPF ELF artifacts (clang, rustc/Aya, zig). Types-only complement to bpf2go.

ebirukov /bstrace

bstrace (BPF syscall trace) - утилита для логирования системных вызовов