diff --git a/src/1-helloworld/README.md b/src/1-helloworld/README.md index 7aac4ee9..a12390f2 100644 --- a/src/1-helloworld/README.md +++ b/src/1-helloworld/README.md @@ -16,7 +16,8 @@ 要开发eBPF程序,您需要安装以下软件和工具: -- Linux 内核:由于eBPF是内核技术,因此您需要具备较新版本的Linux内核(推荐4.8及以上版本),以支持eBPF功能。 +- Linux 内核:由于eBPF是内核技术,因此您需要具备较新版本的Linux内核(至少 4.8 及以上版本,建议至少在 5.15 以上),以支持eBPF功能。 + - 建议使用最新的 Ubuntu 版本(例如 Ubuntu 23.10)以获得最佳的学习体验,较旧的内核 eBPF 功能支持可能相对不全。 - LLVM 和 Clang:这些工具用于编译eBPF程序。安装最新版本的LLVM和Clang可以确保您获得最佳的eBPF支持。 eBPF 程序主要由两部分构成:内核态部分和用户态部分。内核态部分包含 eBPF 程序的实际逻辑,用户态部分负责加载、运行和监控内核态程序。 diff --git a/src/1-helloworld/README_en.md b/src/1-helloworld/README_en.md index 17649d64..6968fac7 100644 --- a/src/1-helloworld/README_en.md +++ b/src/1-helloworld/README_en.md @@ -16,7 +16,8 @@ Before starting to write eBPF programs, we need to prepare a suitable developmen To develop eBPF programs, you need to install the following software and tools: -- Linux kernel: Since eBPF is a kernel technology, you need to have a relatively new version of the Linux kernel (recommended version 4.8 and above) to support eBPF functionality. +- Linux kernel: Since eBPF is a kernel technology, you need to have a relatively new version of the Linux kernel (minimium version 4.8 and above, suggested version is 5.15+ or 6.2+) to support eBPF functionality. + - If possible, install a new version of Ubuntu (e.g. 23.10) would be better. - LLVM and Clang: These tools are used to compile eBPF programs. Installing the latest version of LLVM and Clang ensures that you get the best eBPF support. An eBPF program consists of two main parts: the kernel space part and the user space part. The kernel space part contains the actual logic of the eBPF program, while the user space part is responsible for loading, running, and monitoring the kernel space program.