Move away from bpf2go

[aerosouund]

What problem does this solve?

bpf2go stifles us in terms of repo structure, the project's bpf layer is growing and is becoming more intermingled in terms of functions and variables used. at one point it would be beneficial to have a bespoke solution

Proposed change

Alternatives considered

No response.

Additional context

No response.

Delivery planning

Outcome: Operate at scale. Priority: P3.

Require a reproducible build/tooling blocker and measured benefit before replacing bpf2go. Preserve pinned generation, verifier loading and artifact drift checks. This is not a prerequisite for CIDR/prefix feature delivery.

Follow the repository build/test, kind behavior, documentation and redaction requirements. Acceptance must distinguish prevention from observation.

[yashrajshuklaaa]

Hi @aerosouund
This is relevant to some Phase 1 work I am starting on #172 (fs-verity digest matching) which adds a new _cprog/*.c source under pkg/bpf/lsm following the current bpf2go generated pattern (lsmdispatcherexeccheck_bpfel.go etc).

wanted to check on sequencing before I start. Should I go ahead and build on top of bpf2go as it exists today or is a move away from it planned soon enough that it would be better to wait or coordinate with this issue? do not want to add new code on the old pattern if it is going to be restructured shortly after.
happy to help test the new setup once there is something concrete here since my change will be touching the same package.

[aerosouund]

@yashrajshuklaaa
Its fine to move ahead because i don't think we will be deleting bpf2go for now. We already reduced some of its downsides with removing the creation of big endian programs which were cluttering the repo. We will continue with the overall plan of removing it though but not soon.

With that said, i wouldn't recommend building the digest verify feature now as its not confirmed whether we want it or no.
This one is a bit higher on our priority list and we are sure we want it. Would you like to work on it ? if not, i can try to find something else for you

[yashrajshuklaaa]

@aerosouund yaa sure if this is still valid i'd love to work on this