ebpf-for-windows/InstallEbpf.md в e713f42d378fc10ec655c7300569a0ca86c6f9de

9.0 KiB

Исходник Ответственный История

Installing eBPF into a Test VM

Follow the VM Installation Instructions for one-time setup of a test VM. Once the one-time setup has been completed, the following steps will install or update the eBPF installation in the VM.

Method 1 (Install a release with the MSI installer)

Do the following from within the VM:

Download and install the VC++ Redist package from this location.
Download the eBPF-for-Windows.x.x.x.msi file from the latest release on GitHub.
Execute the MSI file you downloaded.
After accepting the License and selecting the desired installation folder (default will be "C:\Program Files\ebpf-for-windows"), the following components will be selectable from the Installation Wizard:
- Runtime Components (mandatory): this feature adds the eBPF runtime and core components, which are also required by the other components. If you select only this feature, only native code generation is enabled.
  - JIT (optional): this sub-feature adds support for JIT-compiled eBPF programs and (in a Debug build only) interpreted eBPF programs.
- Development (optional): this feature adds headers and libraries used for development. If you only want to use eBPF for development rather than running programs, you can use the NuGet package instead of the MSI.
- Testing (optional): this feature adds tests for the eBPF runtime for use by eBPF runtime developers.

An command line install/uninstall is also supported, through the direct use of C:\Windows\system32\msiexec.exe from an administrative Command Prompt:

The installation folder can be customized by assigning the desired path to the INSTALLFOLDER parameter (path with spaces must be put between double quotes), i.e.:
```
INSTALLFOLDER="C:\Program Files\ebpf-for-windows"
```
The following feature-components are available for customization, and must be assigned as comma-separated values to the ADDLOCAL parameter:
- eBPF_Runtime_Components (mandatory): runtime components (installed in [Installation folder]\*, [Installation folder]\drivers).
- eBPF_Runtime_Components_JIT (optional): JIT compiler service (installed in [Installation folder]\JIT).
- eBPF_Development (optional): header files, scripts and libraries for development (installed in [Installation folder]\include,[Installation folder]\lib,[Installation folder]\scripts).
- eBPF_Testing (optional): header files for development (installed in [Installation folder]\testing).
e.g., (full featured):
```
ADDLOCAL=eBPF_Runtime_Components,eBPF_Runtime_Components_JIT,eBPF_Development,eBPF_Testing
```

Below are some examples of CLI installations/uninstallation, using "C:\Program Files\ebpf-for-windows" as the installation folder:

Installation:

Note: add the "/qn" switch for unattended install.

# Debug MSI - fully-featured installation
C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi INSTALLFOLDER="C:\Program Files\ebpf-for-windows" ADDLOCAL=eBPF_Runtime_Components,eBPF_Runtime_Components_JIT,eBPF_Development,eBPF_Testing

# Debug MSI - fully-featured installation, no JIT compiler
C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi INSTALLFOLDER="C:\Program Files\ebpf-for-windows" ADDLOCAL=eBPF_Runtime_Components,eBPF_Development,eBPF_Testing

# Release MSI - fully-featured installation, including the JIT compiler (available on pre-release versions only)
C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi INSTALLFOLDER="C:\Program Files\ebpf-for-windows" ADDLOCAL=eBPF_Runtime_Components,eBPF_Runtime_Components_JIT,eBPF_Development,eBPF_Testing

# Release MSI - fully-featured installation (no JIT compiler on future post-release versions)
C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi INSTALLFOLDER="C:\Program Files\ebpf-for-windows" ADDLOCAL=eBPF_Runtime_Components,eBPF_Development,eBPF_Testing

# Release MSI - minimal installation (only runtime components)
C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi INSTALLFOLDER="C:\Program Files\ebpf-for-windows" ADDLOCAL=eBPF_Runtime_Components

Uninstallation (here unattended, with the "/qn" switch):

C:\Windows\system32\msiexec.exe /x eBPF-for-Windows.x.x.x.msi /qn

Troubleshooting logs from the Windows Installer can be obtained be appending the /l[options] <filename> option to the install command line (for extra-verbose logs use "/l*vx"), e.g.:


C:\Windows\system32\msiexec.exe /i eBPF-for-Windows.x.x.x.msi <other options> /l*vx c:\installer-log.txt

Method 2 (Install files you built yourself)

This method uses a machine that has already built the binaries for x64/Debug or x64/Release.

Deploy the binaries to C:\Temp in your VM, as follows (from within a "Developer PowerShell for VS 2022"):
- If you built the binaries from inside the VM, then from your ebpf-for-windows directory in the VM, run:
```
.\x64\debug\deploy-ebpf -l
```
- Otherwise, if you built the binaries on the host machine, then from your ebpf-for-windows directory on the host machine, start an admin Powershell on the host machine and run:
```
.\x64\debug\deploy-ebpf --vm="<test-vm-name>"
```
  or, to also copy files needed to run various tests, run:
```
.\x64\debug\deploy-ebpf --vm="<test-vm-name>" -t
```
  or, to copy files to a specific directory, including file shares, run:
```
.\x64\debug\deploy-ebpf -l="c:\some\path"
```
From within the VM, install the binaries by starting an administrator Command Prompt shell (cmd.exe) , and running the following commands:
```
cd C:\Temp

powershell -ExecutionPolicy Bypass .\scripts\setup-ebpf.ps1
```

Method 3 (Install files you built yourself, with a VM checkpoint)

This method uses a machine that has already built the binaries for x64/Debug or x64/Release.

Copy the build output in \x64\[Debug|Release] to the host of the test VM and run the following in a Powershell command prompt:

Create a snapshot of the test VM named baseline, by running:

Checkpoint-VM -Name <test-vm-name> -CheckpointName baseline

Store the VM administrator credential, by running the following commands:

Install-Module CredentialManager -force

New-StoredCredential -Target TEST_VM -Username <VM Administrator> -Password <VM Administrator account password> -Persist LocalMachine

Note that "TEST_VM" is literal and is used in step 5 below; it need not be the name of any actual test VM.

Enter the \x64\[Debug|Release] directory (cd) where the build artifacts are stored.

Modify .\vm_list.json to specify the name of the test VM under VMList, eg:

{
    ...

    "VMList":
    [
        {
            "Name": "<test-vm-name>"
        }
    ]
}

Run the following commands to setup to use the credentials saved with TEST_VM in step 2, for logging into each of the VMs named in vm_list.json:
```
Set-ExecutionPolicy unrestricted -Force
```
```
.\setup_ebpf_cicd_tests.ps1
```

Installing eBPF with host-process container

The following instructions will build an ebpf-for-windows image and deploy a daemonset referencing the image. This is the easiest way to install eBPF on all Windows nodes in a Kubernetes cluster.

Download the .msi file from the latest release on GitHub and copy it over to images directory.
Build ebpf-for-windows image.
- To build the image on the Windows Host, make sure docker is installed. Install docker on Windows Server. Start an admin Powershell on the Windows Host and run the following command and provide parameters for repository, tag and OSVersion:
```
.\images\build-images.ps1
```
- To build the image on a Linux machine (e.g. Ubuntu), make sure docker is installed (see install docker on Ubuntu), and do the following:
  - Run the following command and provide parameters for repository, tag and OSVersion:
```
$HOME/ebpf-for-windows-image/build-images.sh
```
Push the ebpf-for-windows image to your repository.
Update manifests/Kubernetes/ebpf-for-windows-daemonset.yaml with the container image pointing to your image path. Run the following command:
```
kubectl apply -f manifests/Kubernetes/ebpf-for-windows-daemonset.yaml
```

9.0 KiB Исходник Ответственный История