github.com/inspektor-gadget/inspektor-gadget@v0.28.1/docs/crds/gadgets/traceloop.md (about)

     1  ---
     2  # Code generated by 'make generate-documentation'. DO NOT EDIT.
     3  title: Gadget traceloop
     4  ---
     5  
     6  The traceloop gadget traces system calls in a similar way to strace but with
     7  some differences:
     8  
     9  * traceloop uses eBPF instead of ptrace
    10  * traceloop's tracing granularity is the container instead of a process
    11  * traceloop's traces are recorded in a fast, in-memory, overwritable ring
    12    buffer like a flight recorder. The tracing could be permanently enabled and
    13    inspected in case of crash.
    14  
    15  
    16  ### Example CR
    17  
    18  ```yaml
    19  apiVersion: gadget.kinvolk.io/v1alpha1
    20  kind: Trace
    21  metadata:
    22    name: traceloop
    23    namespace: gadget
    24  spec:
    25    node: ubuntu-hirsute
    26    gadget: traceloop
    27    runMode: Manual
    28    outputMode: ExternalResource
    29  ```
    30  
    31  ### Operations
    32  
    33  
    34  #### collect
    35  
    36  Collect traceloop
    37  
    38  ```bash
    39  $ kubectl annotate -n gadget trace/traceloop \
    40      gadget.kinvolk.io/operation=collect
    41  ```
    42  #### delete
    43  
    44  Delete a perf ring buffer owned by traceloop
    45  
    46  ```bash
    47  $ kubectl annotate -n gadget trace/traceloop \
    48      gadget.kinvolk.io/operation=delete
    49  ```
    50  #### start
    51  
    52  Start traceloop
    53  
    54  ```bash
    55  $ kubectl annotate -n gadget trace/traceloop \
    56      gadget.kinvolk.io/operation=start
    57  ```
    58  #### stop
    59  
    60  Stop traceloop
    61  
    62  ```bash
    63  $ kubectl annotate -n gadget trace/traceloop \
    64      gadget.kinvolk.io/operation=stop
    65  ```
    66  
    67  ### Output Modes
    68  
    69  * Status
    70  * Stream