traceexec.go

package main

import (
	"fmt"

	"github.com/cilium/ebpf/rlimit"
	"github.com/kinvolk/inspektor-gadget/pkg/gadgets/execsnoop/tracer"
	execsnooptracer "github.com/kinvolk/inspektor-gadget/pkg/gadgets/execsnoop/tracer/core"
	"github.com/kinvolk/inspektor-gadget/pkg/gadgets/execsnoop/types"
)

func main() {

	if err := rlimit.RemoveMemlock(); err != nil {
		return
	}

	eventCallback := func(event types.Event) {
		fmt.Printf("new event: %s\n", event)
	}

	config := &tracer.Config{
		MountnsMap: "",
	}

	tracer, err := execsnooptracer.NewTracer(config, nil, eventCallback, "foo")
	if err != nil {
		fmt.Printf("error creating tracer: %s\n", err)
		return
	}

	fmt.Printf("enter to close: ")
	fmt.Scanln()

	tracer.Stop()
}