fix(rust): use legacy netlink ebpf attachment on kernel version 6.6.0+

build-trust · Dec 6, 2024 · acd70a2 · acd70a2
1 parent 5ef78c1
commit acd70a2
Showing 1 changed file with 15 additions and 3 deletions.
diff --git a/implementations/rust/ockam/ockam_transport_tcp/src/privileged_portal/ebpf_support.rs b/implementations/rust/ockam/ockam_transport_tcp/src/privileged_portal/ebpf_support.rs
@@ -4,7 +4,7 @@ use crate::privileged_portal::{
     Iface, InletRegistry, OutletRegistry, Port, Proto, RawSocketProcessor, TcpPacketWriter,
 };
 use aya::maps::{MapData, MapError};
-use aya::programs::tc::SchedClassifierLink;
+use aya::programs::tc::{NlOptions, SchedClassifierLink, TcAttachOptions};
 use aya::programs::{tc, Link, ProgramError, SchedClassifier, TcAttachType};
 use aya::{Ebpf, EbpfError};
 use aya_log::EbpfLogger;
@@ -277,11 +277,17 @@ impl TcpTransportEbpfSupport {
             .unwrap()
             .try_into()
             .map_err(map_program_error)?;
+
         if !skip_load {
             program_ingress.load().map_err(map_program_error)?;
         }
+
         let link_id = program_ingress
-            .attach(&iface, TcAttachType::Ingress)
+            .attach_with_options(
+                &iface,
+                TcAttachType::Ingress,
+                TcAttachOptions::Netlink(NlOptions::default()),
+            )
             .map_err(map_program_error)?;
         let link_id = program_ingress
             .take_link(link_id)
@@ -306,11 +312,17 @@ impl TcpTransportEbpfSupport {
             .unwrap()
             .try_into()
             .map_err(map_program_error)?;
+
         if !skip_load {
             program_egress.load().map_err(map_program_error)?;
         }
+
         let link_id = program_egress
-            .attach(&iface, TcAttachType::Egress)
+            .attach_with_options(
+                &iface,
+                TcAttachType::Egress,
+                TcAttachOptions::Netlink(NlOptions::default()),
+            )
             .map_err(map_program_error)?;
         let link_id = program_egress
             .take_link(link_id)