Options

It’s possible to pass options through spec file as an array of name and value pairs:

spec:
  options:
    - name: "option-1"
      value: "True"
    - name: "option-2"
      value: "10"

Options array is passed and processed by each hook used in the spec file that supports options. At the moment it’s availabe for kprobe and uprobe hooks.

• Kprobe Options: options for kprobe hooks.
• Uprobe Options: options for uprobe hooks.

Kprobe options

• disable-kprobe-multi: disable kprobe multi link

disable-kprobe-multi

This option disables kprobe multi link interface for all the kprobes defined in the spec file. If enabled, all the defined kprobes will be atached through standard kprobe interface. It stays enabled for another spec file without this option.

It takes boolean as value, by default it’s false.

Example:

  options:
    - name: "disable-kprobe-multi"
      value: "1"

Uprobe options

• disable-uprobe-multi: disable uprobe multi link
• uprobe-heap-size: set the process call heap map size

disable-uprobe-multi

This option disables uprobe multi link interface for all the uprobes defined in the spec file. If enabled, all the defined uprobes will be atached through standard uprobe interface. It stays enabled for another spec file without this option.

It takes boolean as value, by default it’s false.

Example:

  options:
    - name: "disable-uprobe-multi"
      value: "1"

uprobe-heap-size

This option sets the maximum number of entries for following heap maps:

• process_call_heap
• ratelimit_heap
• string_postfix_maps_heap
• string_prefix_maps_heap
• string_maps_heap
• buffer_heap_map

used by uprobe and usdt sensors. It applies to both uprobes and usdts defined in the spec file.

When not set, all maps above are shared globally across all policies and sized by the --uprobe-heap-size daemon flag (default 32768). Setting this option makes the spec file use its own dedicated maps of the given size instead.

It takes a positive integer as value.

Example:

  options:
    - name: "uprobe-heap-size"
      value: "65536"