I think in theory it could be possible to make static eBPF, i.e. take the source tree compile eBPF as inline modifications. I.e. mimic "printk debugging" with eBPF.
When kernel testing e.g. with BuildRoot this would be more lean than actual eBPF.
"git workspace" gives a reference model for clone snapshotting.
Usually when fixing kernel bug or doing some improvement to kernel, adding a few temp printk's is still imho the king because kernel compiles in no time. Dynamic tracing tools do not support this workflow very well. They support well debugging exactly live systems, which is totally different use case.
#linux #kernel #ebpf