If you found this useful it's probably worth taking a look at bpftrace. There's a pretty wide range of different tracing infrastructure in the kernel and bpftrace is just one single tool that lets you interact with all of it, in a very flexible way.

Hi! It's strange for me to see one of my posts get some love on HN, years after I wrote it (and not one of my best pieces, by my own estimation).

Thanks to everyone who took the time to read.

This is a pretty interesting method to prove/debug the kernel on the fly

[flagged]