An error was reported when using bpfcctools, /sys/kernel/debug/tracing/kprobe_events No such file or directory, how to repair it

[xiaoke]

What do I need to do to fix this error?

Here is some information:

root@orangepi5 ~# lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 22.04.2 LTS
Release:	22.04
Codename:	jammy
root@orangepi5 ~#
root@orangepi5 ~# uname -a
Linux orangepi5 5.10.110-rockchip-rk3588 #23.02.2 SMP Fri Feb 17 23:59:20 UTC 2023 aarch64 aarch64 aarch64 GNU/Linux
root@orangepi5 ~#
root@orangepi5 ~# apt install -y bpfcc-tools libbpfcc-dev python3-bpfcc libbpfcc
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  ieee-data libclang-cpp11 libllvm11 python3-netaddr
Suggested packages:
  ipython3 python-netaddr-docs
The following NEW packages will be installed:
  bpfcc-tools ieee-data libbpfcc libbpfcc-dev libclang-cpp11 libllvm11 python3-bpfcc python3-netaddr
0 upgraded, 8 newly installed, 0 to remove and 0 not upgraded.
Need to get 30.1 MB of archives.
After this operation, 136 MB of additional disk space will be used.
Get:1 http://ports.ubuntu.com jammy/universe arm64 libllvm11 arm64 1:11.1.0-6 [17.2 MB]
Get:2 http://ports.ubuntu.com jammy/universe arm64 libclang-cpp11 arm64 1:11.1.0-6 [9,149 kB]
Get:3 http://ports.ubuntu.com jammy/universe arm64 libbpfcc arm64 0.18.0+ds-2 [599 kB]
Get:4 http://ports.ubuntu.com jammy/universe arm64 python3-bpfcc all 0.18.0+ds-2 [34.6 kB]
Get:5 http://ports.ubuntu.com jammy/main arm64 ieee-data all 20210605.1 [1,887 kB]
Get:6 http://ports.ubuntu.com jammy/main arm64 python3-netaddr all 0.8.0-2 [309 kB]
Get:7 http://ports.ubuntu.com jammy/universe arm64 bpfcc-tools all 0.18.0+ds-2 [627 kB]
Get:8 http://ports.ubuntu.com jammy/universe arm64 libbpfcc-dev arm64 0.18.0+ds-2 [325 kB]
Fetched 30.1 MB in 9s (3,363 kB/s)
Selecting previously unselected package libllvm11:arm64.
(Reading database ... 97548 files and directories currently installed.)
Preparing to unpack .../0-libllvm11_1%3a11.1.0-6_arm64.deb ...
Unpacking libllvm11:arm64 (1:11.1.0-6) ...
Selecting previously unselected package libclang-cpp11.
Preparing to unpack .../1-libclang-cpp11_1%3a11.1.0-6_arm64.deb ...
Unpacking libclang-cpp11 (1:11.1.0-6) ...
Selecting previously unselected package libbpfcc.
Preparing to unpack .../2-libbpfcc_0.18.0+ds-2_arm64.deb ...
Unpacking libbpfcc (0.18.0+ds-2) ...
Selecting previously unselected package python3-bpfcc.
Preparing to unpack .../3-python3-bpfcc_0.18.0+ds-2_all.deb ...
Unpacking python3-bpfcc (0.18.0+ds-2) ...
Selecting previously unselected package ieee-data.
Preparing to unpack .../4-ieee-data_20210605.1_all.deb ...
Unpacking ieee-data (20210605.1) ...
Selecting previously unselected package python3-netaddr.
Preparing to unpack .../5-python3-netaddr_0.8.0-2_all.deb ...
Unpacking python3-netaddr (0.8.0-2) ...
Selecting previously unselected package bpfcc-tools.
Preparing to unpack .../6-bpfcc-tools_0.18.0+ds-2_all.deb ...
Unpacking bpfcc-tools (0.18.0+ds-2) ...
Selecting previously unselected package libbpfcc-dev.
Preparing to unpack .../7-libbpfcc-dev_0.18.0+ds-2_arm64.deb ...
Unpacking libbpfcc-dev (0.18.0+ds-2) ...
Setting up libllvm11:arm64 (1:11.1.0-6) ...
Setting up ieee-data (20210605.1) ...
Setting up libclang-cpp11 (1:11.1.0-6) ...
Setting up python3-netaddr (0.8.0-2) ...
Setting up libbpfcc (0.18.0+ds-2) ...
Setting up python3-bpfcc (0.18.0+ds-2) ...
Setting up bpfcc-tools (0.18.0+ds-2) ...
Setting up libbpfcc-dev (0.18.0+ds-2) ...
Processing triggers for man-db (2.10.2-1) ...
Processing triggers for libc-bin (2.35-0ubuntu3.1) ...
root@orangepi5 ~#
root@orangepi5 ~# execsnoop-bpfcc
create_probe_event: open(/sys/kernel/debug/tracing/kprobe_events): No such file or directory
Traceback (most recent call last):
  File "/usr/sbin/execsnoop-bpfcc", line 229, in <module>
    b.attach_kprobe(event=execve_fnname, fn_name="syscall__execve")
  File "/usr/lib/python3/dist-packages/bcc/__init__.py", line 683, in attach_kprobe
    raise Exception("Failed to attach BPF program %s to kprobe %s" %
Exception: Failed to attach BPF program b'syscall__execve' to kprobe b'__arm64_sys_execve'
root@orangepi5 ~#
root@orangepi5 ~# ls /sys/kernel/debug/tracing
available_events            buffer_total_size_kb   error_log        options         saved_cmdlines_size    set_ftrace_filter       set_graph_notrace  trace_marker_raw  tracing_thresh
available_filter_functions  current_tracer         events           per_cpu         saved_tgids            set_ftrace_notrace      timestamp_mode     trace_options     uprobe_events
available_tracers           dynamic_events         free_buffer      printk_formats  set_event              set_ftrace_notrace_pid  trace              trace_pipe        uprobe_profile
buffer_percent              dyn_ftrace_total_info  instances        README          set_event_notrace_pid  set_ftrace_pid          trace_clock        tracing_cpumask
buffer_size_kb              enabled_functions      max_graph_depth  saved_cmdlines  set_event_pid          set_graph_function      trace_marker       tracing_on
root@orangepi5 ~#
root@orangepi5 ~# ls /sys/kernel/debug/tracing/kprobe_events
ls: cannot access '/sys/kernel/debug/tracing/kprobe_events': No such file or directory
root@orangepi5 ~#

 

 

 

 

Edited March 6, 2023 by xiaoke