A book-in-progress about the Linux kernel and its insides.
- linux-kernel
- linux-insides
- linux
Repository Index
47,133 repositories indexed
1–16 of 16 · Most stars
Learning operating system development using Linux kernel and Raspberry Pi
The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
- ebpf
- ebpf-co-re
- linux-kernel
Web Serving and Remote Procedure Calls at 50x lower latency and 70x higher bandwidth than FastAPI, implementing JSON-RPC & REST over io_uring ☎️
- cpython
- epoll
- fast-api
- flask
ebpfkit is a rootkit powered by eBPF
Prototyping kernel development work outside mainline
- kernel-modules
- kernel
- xdp
- ebpf-programs
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
A virtual car. Because you wouldn't download a car, would you?
- car
- ecu
- linux-kernel
- automobiles
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.
Cross-compile the Linux kernel for Raspberry Pi with enhanced security in a single command.
- raspberry-pi
- linux-kernel
- raspberrypi-kernel
- security
Open-source eBPF compatibility evidence and CI gate
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem