tetragon: Add v6.0 bpf objects and related fixes

[olsajiri]

With clang 14 the prepend_path loop code does not pass verifier
on v6.x kernels, which can be fixed by using bpf_loop helper.

In order to use bpf_loop helper easily, I'm adding v6.0 version of
bpf objects, so we don't need to detect features and have specific
binary for each.

The v6.0 seems to be the latest stable, I'm not sure it will be longterm,
but with 5.19 EOL the other possibility is 5.15 which does not have
bpf_loop helper.. but I'm open to suggestions in here ;-)

Note I plan to move kprobe_multi objects into v60 in following changes.

Signed-off-by: Jiri Olsa [email protected]

[kkourt]

Thanks!

Just some small comments from my side.

It would be nice to use bpf_d_path here, but AFAICT we cannot:

static bool bpf_d_path_allowed(const struct bpf_prog *prog)
{
	if (prog->type == BPF_PROG_TYPE_TRACING &&
	    prog->expected_attach_type == BPF_TRACE_ITER)
		return true;

	if (prog->type == BPF_PROG_TYPE_LSM)
		return bpf_lsm_is_sleepable_hook(prog->aux->attach_btf_id);

	return btf_id_set_contains(&btf_allowlist_d_path,
				   prog->aux->attach_btf_id);
}

[olsajiri]

Thanks!

Just some small comments from my side.

It would be nice to use bpf_d_path here, but AFAICT we [cannot]

yes, I have plan for that, but first we need to use raw tracepoint with BTF arguments
instead of standard tracepoint.. we can use that in 60 objects