Build

First, install build dependencies:

1. Install Rust.
2. Install clang and libbpf-dev. Ubuntu: apt install clang libbpf-dev. Building with --features k8s also needs musl-tools.
3. Prepare environment for Aya.

Release build:

cargo xtask build --release

Run

The default config in ./install/config writes events to /var/log/bombini/bombini.log. To print them to stdout, copy the config and comment log_file out:

cp -r ./install/config /tmp/bombini-config
sed -i 's/^log_file:/#log_file:/' /tmp/bombini-config/config.yaml

sudo ./target/release/bombini --bpf-objs ./target/bpfel-unknown-none/release --config-dir /tmp/bombini-config

Or using cargo:

cargo xtask run --release -- --bpf-objs ./target/bpfel-unknown-none/release --config-dir /tmp/bombini-config

By default Bombini starts only ProcMon detector intercepting process execs and exits. To customize your Bombini setup, please, follow the Configuration. Bombini uses env_logger crate. To see agent logs set RUST_LOG=info|debug environment variable.