# bpftime | eunomia-bpf | Knowledge Base | Instagit

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework

GitHub Stars: 1.4k

Repository: https://github.com/eunomia-bpf/bpftime

---

## Articles

### [Central Object Registry in bpftime: handler_manager.hpp Implementation Guide](/eunomia-bpf/bpftime/which-file-is-central-object-registry-in-bpftime)

Explore the handler_manager.hpp file, the central object registry in bpftime. Learn how it manages eBPF objects across processes using shared memory and file descriptors.

- Tags: internals
- Published: 2026-03-01

### [Understanding the Base Attach Implementation Interface in bpftime](/eunomia-bpf/bpftime/file-defining-base-attach-implementation-interface-bpftime)

Discover the base attach implementation interface in bpftime defined in base_attach_impl.hpp. Learn how abstract classes ensure consistent attach type inheritance for better BPF program management.

- Tags: internals
- Published: 2026-03-01

### [VM Interface Definition in bpftime: Header Location and API Reference](/eunomia-bpf/bpftime/where-to-find-vm-interface-definition-in-bpftime)

Locate the bpftime VM interface definition in ebpf-vm.h to manage eBPF program creation, configuration, and execution across pluggable backends. Find the API reference here.

- Tags: api-reference
- Published: 2026-03-01

### [bpftime Runtime API Header File: Complete Guide to `bpftime.hpp`](/eunomia-bpf/bpftime/main-runtime-api-header-file-in-bpftime)

Explore bpftime.hpp the primary runtime API header file for bpftime. Access shared-memory management program loading and attachment contexts with this essential guide.

- Tags: api-reference
- Published: 2026-03-01

### [How to Run bpftime Unit Tests: Complete Guide for Developers](/eunomia-bpf/bpftime/how-to-run-bpftime-unit-tests)

Learn how to run bpftime unit tests with our comprehensive guide. Execute the Catch2 test suite covering runtime, daemon, and verifier components. Follow simple build and test commands for instant verification.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Enable LLVM JIT Support When Building bpftime: A Complete Guide](/eunomia-bpf/bpftime/how-to-enable-llvm-jit-support-when-building-bpftime)

Enable LLVM JIT support in bpftime by setting the CMake flag -DBPFTIME_LLVM_JIT=ON. Discover how to activate the default eBPF execution engine for high performance.

- Tags: how-to-guide
- Published: 2026-03-01

### [Key Configuration Options for Building bpftime: A Complete CMake Guide](/eunomia-bpf/bpftime/key-configuration-options-for-building-bpftime)

Discover bpftime's key CMake configuration options for JIT, kernel integration, GPU support, and static linking. Customize your build for debugging or production with simple flags.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Add New Event Sources to bpftime: A Complete Developer's Guide](/eunomia-bpf/bpftime/how-to-add-new-event-sources-to-bpftime)

Learn how to add new event sources to bpftime with this developer's guide. Implement base_attach_impl, define identifiers, create private data, and register with bpf_attach_ctx for seamless integration.

- Tags: how-to-guide
- Published: 2026-03-01

### [bpftime Compatibility with Existing eBPF Toolchains: A Complete Guide to Clang and libbpf Integration](/eunomia-bpf/bpftime/how-compatible-is-bpftime-with-ebpf-toolchains)

Discover bpftime compatibility with existing eBPF toolchains. Run clang and libbpf compiled programs unchanged in userspace with this drop-in companion.

- Tags: deep-dive
- Published: 2026-03-01

### [Performance Benefits of Using bpftime: 10× Faster eBPF Execution Explained](/eunomia-bpf/bpftime/what-are-performance-benefits-of-using-bpftime)

Discover how bpftime achieves 10× faster eBPF execution by bypassing the kernel, using a JIT AOT compiler, and zero-copy shared-memory. Explore the performance benefits today.

- Tags: performance
- Published: 2026-03-01

### [How bpftime Implements Interprocess eBPF Maps Using Shared Memory](/eunomia-bpf/bpftime/how-does-bpftime-implement-interprocess-ebpf-maps-shared-memory)

Discover how bpftime utilizes shared memory for interprocess eBPF maps, enabling zero-copy access across processes for efficient communication without kernel intervention.

- Tags: internals
- Published: 2026-03-01

### [How the Handler Pattern Works in bpftime: Shared-Memory Object Management](/eunomia-bpf/bpftime/how-does-handler-pattern-work-in-bpftime)

Discover how the handler pattern in bpftime uses type-safe shared memory to manage BPF maps, programs, and links across processes. Learn about zero-copy access and automatic lifecycle management.

- Tags: internals
- Published: 2026-03-01

### [What is the bpftime daemon? Function and Architecture Explained](/eunomia-bpf/bpftime/what-is-function-of-bpftime-daemon)

Discover the bpftime daemon a system monitoring service that boosts eBPF performance up to 10x by redirecting kernel events to userspace for improved efficiency and compatibility.

- Tags: deep-dive
- Published: 2026-03-01

### [How bpftime Performs Safety Verification for eBPF Programs: Architecture and Implementation](/eunomia-bpf/bpftime/how-does-bpftime-perform-safety-verification)

Discover how bpftime ensures eBPF program safety with static analysis and thread-local verification leveraging the Linux kernel's ebpf-verifier. Learn about memory safety and termination guarantees.

- Tags: internals
- Published: 2026-03-01

### [How bpftime Implements Event Attachment Mechanisms: A Modular Plugin Architecture](/eunomia-bpf/bpftime/how-does-bpftime-implement-event-attachment-mechanisms)

Discover how bpftime implements event attachment via a modular plugin architecture. Explore its flexible design for Frida uprobes, syscall tracing, and custom triggers.

- Tags: internals
- Published: 2026-03-01

### [What Is the Runtime Component in bpftime? A Deep Dive into Userspace eBPF Execution](/eunomia-bpf/bpftime/what-is-role-of-runtime-component-in-bpftime)

Discover how the bpftime runtime component elevates userspace eBPF execution with its high-performance engine, shared memory, modular backends, and kernel-compatible APIs.

- Tags: deep-dive
- Published: 2026-03-01

### [How bpftime Handles eBPF Virtual Machines: A Plugin Architecture Deep Dive](/eunomia-bpf/bpftime/how-does-bpftime-handle-ebpf-virtual-machines)

Discover how bpftime handles eBPF virtual machines using a plugin architecture and a unified C API. Learn about its support for interpretation, JIT, and future AOT extensions.

- Tags: deep-dive
- Published: 2026-03-01

### [Understanding the bpftime Architecture: Core Components and Design](/eunomia-bpf/bpftime/what-are-main-components-of-bpftime-architecture)

Explore the bpftime architecture and its six core components: VM, runtime, attach system, verifier, loader, and daemon. Understand how they enable high-performance userspace eBPF execution.

- Tags: architecture
- Published: 2026-03-01

### [How to Use bpftime with Kernel eBPF: Hybrid Execution and Verification Guide](/eunomia-bpf/bpftime/how-to-use-bpftime-with-kernel-ebpf)

Master bpftime with kernel eBPF. Enable hybrid execution by setting BPFTIME_RUN_WITH_KERNEL=true for kernel verification and userspace performance. Learn more.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Dynamically Attach bpftime to a Running Process: Complete Guide](/eunomia-bpf/bpftime/how-to-dynamically-attach-bpftime-to-running-process)

Dynamically attach bpftime to a running process using the bpftime attach PID command and Frida. Instrument your target without restarting for seamless eBPF integration.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Run a Target Program with bpftime Attached: CLI, Injection, and Execution Flow](/eunomia-bpf/bpftime/how-to-run-target-program-with-bpftime-attached)

Learn how to run a target program with bpftime attached. Load eBPF objects, inject the agent, and execute bytecode in user space for powerful program analysis and manipulation.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Load an eBPF Program with bpftime](/eunomia-bpf/bpftime/how-to-load-ebpf-program-with-bpftime)

Learn how to load an eBPF program with bpftime. Inject a syscall-server library via LD_PRELOAD to intercept bpf() calls and run your eBPF programs in userspace.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Use bpftime Docker Images: Complete Setup and Customization Guide](/eunomia-bpf/bpftime/how-to-use-bpftime-docker-images)

Learn how to use bpftime Docker images for seamless eBPF development. Get the complete build environment, LLVM JIT runtime, and CLI tools without host dependencies. Install and customize bpftime easily.

- Tags: how-to-guide
- Published: 2026-03-01

### [How to Build bpftime from Source: A Complete CMake Guide](/eunomia-bpf/bpftime/how-to-build-bpftime-from-source)

Learn how to build bpftime from source using CMake. Follow our guide to clone the repo, install dependencies like libelf and LLVM, and configure your build for custom settings or use the convenient Makefile.

- Tags: how-to-guide
- Published: 2026-03-01