Inspektor Gadget

Term 2 · Jun-Aug · 1 project

• [PM Mentorship] Traceloop GTM Strategy and Execution

  LFX Mentorship · Listed in the official cohort

  @mayasingh17Source IssueLFX portal

  This is a Project Management mentorship (product management for open source) for the project Inspektor Gadget (IG). Inspektor Gadget is a powerful observability tool that enables security, monitoring and troubleshooting on Linux and Kubernetes. The framework uses a concept called “gadgets” which uses a technology called eBPF to enable us to drive valuable insights from the Linux kernel. Today, we have a very powerful gadget called Traceloop. However, as you can see the documentation around it is quite minimal and we need a strategy around how to bring this gadget to market in a big way. With Traceloop users can debug crashing applications as demonstrated here. Our goal is to make community members aware of traceloop and therefore Inspektor Gadget to a) decrease time to resolution for developers debugging their applications b) drive adoption of the project .

  • User Research
  • Translating User Needs to Technical Requirements
  • Marketing Analytics
  • Go-to-market strategy
  • Roadmapping and Prioritization
  • Marketing Content Creation
  • +3

Term 1 · Mar-May · 3 projects

• Building gadgets with Rust

  LFX Mentorship · Listed in the official cohort

  @mauriciovasquezbernalSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. A Gadget is an OCI image that includes one or more eBPF programs, metadata YAML file, and optionally, WASM modules for post processing. Today, Inspektor Gadget provides tooling to build gadgets from source code written in C (for the eBPF module) and Go (for the WASM module). This project is about adding support from building gadgets from Rust both for eBPF programs and for WASM modules.

  • Rust
  • Go
  • eBPF
  • WASM

• Implementing unit tests

  LFX Mentorship · Listed in the official cohort

  @burak-okSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. A Gadget is an OCI image that includes one or more eBPF programs, metadata YAML file, and optionally, WASM modules for post processing. As OCI images, they use the same tooling as containers: building, pushing/pulling from OCI Registries. Even though there are many integration tests, we wish to increase the coverage of unit tests for the majority of internal packages. These packages are essential, and a bad commit could lead to unseen disruptions. Debugging and diagnosing through integration tests is cumbersome and takes too much time.

  • Go

• Inspekting and analysing gadgets

  LFX Mentorship · Listed in the official cohort

  @albanSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. A Gadget is an OCI image that includes one or more eBPF programs, metadata YAML file, and optionally, WASM modules for post processing. As OCI images, they use the same tooling as containers: building, pushing/pulling from OCI Registries. But today, Inspektor Gadget does not have good tooling for inspecting a gadget: the ig image inspect command just gives the gadget name, digest and creation date without further details.

  • Go
  • eBPF

Term 3 · Sep-Nov · 4 projects

• Develop DNS/HTTP event generation capabilities in Inspektor Gadget

  LFX Mentorship · Listed in the official cohort

  @mqasimsarfrazSource IssueLFX portal

  Inspektor Gadget enables users to inspect Linux containers and Kubernetes workloads, offering the powerful capability to monitor traffic for currently running applications. So far, gadgets can only passively monitor events, the ability to generate specific events would be a great addition to the existing features. For example, if users could trigger a DNS request from a specific pod or make an HTTP request to a particular endpoint, Inspektor Gadget could check if the request succeeded or not. Users would then be notified if there are errors/outages/problems in the cluster.

  • Go
  • Kubernetes and Understanding of DNS/HTTP protocols.

• Exploring Chaos Engineering with eBPF and Inspektor Gadget

  LFX Mentorship · Listed in the official cohort

  @flythSource IssueLFX portal

  Chaos Engineering is the discipline of experimenting on a system in order to build confidence in the system’s capability to withstand turbulent conditions in production, ref. i.e. to induce errors on a system and see how it behaves. eBPF can be used to induce such errors on a system, it can change the return value of a kernel function, drop or modify network packets, etc. The goal of this mentorship is to implement a set of gadgets for Inspektor Gadget that helps causing system chaos. These are some ideas of the gadgets that should be implemented: DNS: Drop/modify/add latency DNS requests and/or responses based on The container or process performing it The target URL The DNS server TCP/UDP: Drop network packets based on Destination / Source IPs Originating or destination pod or process Simulate system call failures based on Container or process performing the syscall Syscall The gadgets should expose metrics with the number of times it induced failures, and possibly also provide notifications when those errors were induced.

  • Go
  • eBPF
  • networking protocols.

• New gadget for detecting deadlocks

  LFX Mentorship · Listed in the official cohort

  @albanSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. In this project, you will write a new gadget in BPF and WASM to detect deadlocks in applications. The BPF program will be attached on mutex locks and mutex unlocks functions with uprobes. The WASM program will build a mutex wait directed graph and look for cycles. Then, the gadget will display the stack trace showing the mutex locks causing the deadlock. This project builds upon previous work: In a previous mentorship project, Inspektor Gadget gained support for uprobes and kernel stack traces ( BCC tools include deadlock.py doing the same: and However, this project still has challenging issues to resolve: Inspektor Gadget does not support dumping stack traces from userspace applications yet

  • Go
  • BPF
  • WASM
  • graph data structure

• Testing Inspektor Gadget gadgets on different kernel versions

  LFX Mentorship · Listed in the official cohort

  @mauriciovasquezbernalSource IssueLFX portal

  The Inspektor Gadget gadgets are heavily coupled to the kernel version as they need to access internal kernel data and use different eBPF features. One key feature for Inspektor Gadget is to hide all this complexity from its users: the gadgets should work the same regardless the kernel version they’re running in. To be sure our gadgets (and Inspektor Gadget too) are working fine, we need to run tests on different kernel versions we want to support. The purpose of this mentorship is to develop a framework that allows gadget developers to (1) implement unit tests for their gadgets (2) and run them on different kernel versions. A previous mentorship successfully implemented a framework for running integration tests ( now it’s time to extend that framework to allow running unit tests as well. Some preliminary investigation done in ( explored the possibility to use it seems it’s the right tool for the job.

  • Go

Term 1 · Mar-May · 2 projects

• Support for new types of eBPF programs

  LFX Mentorship · Listed in the official cohort

  @albanSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. Users can develop gadgets using different kinds of eBPF programs: kprobe, tracepoint, etc. This project will focus on adding support for more kinds of eBPF programs such as uprobes and ensuring the documentation is updated for each of them

  • Go
  • containers
  • Linux
  • basics of eBPF

• Testing framework for image-based gadgets

  LFX Mentorship · Listed in the official cohort

  @albanSource IssueLFX portal

  Inspektor Gadget is an eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts. Previously, Inspektor Gadget had a set of built-in gadgets. We are now moving to image-based gadgets where users can develop their own gadgets in eBPF and host them in OCI registries. But we don't have a test framework to help gadget authors to test their gadgets. This project will focus on implementing such a framework, possibly taking inspiration from the existing framework for built-in gadgets. The documentation for gadget authors should be updated. This project has the opportunity to expand beyond testing, to work on the gadget development experience over all, for example by creating a github template for gadget development.

  • Go
  • containers
  • Linux
  • testing