Jibril Docs

Appearance

Requirements ​

Linux System ​

Kernel Version ​

  • Minimum: Linux 5.10+
  • Recommended: Linux 6.2+

Architecture ​

Supported Distributions ​

  • Ubuntu 22.04+ (all flavors)
  • RHEL / CentOS / Rocky 9+
  • Fedora 36+
  • Debian 11+
  • Amazon Linux 2023
  • Arch Linux (latest)

eBPF Support ​

Check for eBPF support in the kernel.

Method 1: Kernel Config File
bash
zcat /proc/config.gz | grep -E "CONFIG_BPF=|CONFIG_BPF_SYSCALL=|CONFIG_HAVE_EBPF_JIT="

Expected output:

ini
CONFIG_BPF=y
CONFIG_BPF_SYSCALL=y
CONFIG_HAVE_EBPF_JIT=y
Method 2: Use bpftool

Install bpftool:

bash
# Arch Linux
sudo pacman -S extra/bpf
# Ubuntu/Debian
sudo apt install linux-tools-common linux-tools-generic
# Fedora/RHEL
sudo dnf install bpftool

Check available features:

bash
sudo bpftool feature probe

Look for BPF and JIT features marked as available.

Privileges & Capabilities ​

Jibril requires elevated privileges to attach eBPF programs to the kernel.

Root Access Required ​

Jibril must run as root or with specific Linux capabilities.

Required capabilities ​

CapabilityPurposeKernel
CAP_BPFLoad and manage eBPF programs5.8+ (preferred)
CAP_PERFMONPerformance monitoring events5.8+
CAP_NET_ADMINNetwork observabilityAll versions
CAP_SYS_ADMINFallback for older kernelsPre-5.8

Docker ​

Docker Engine Version ​

  • Minimum: Docker Engine 20.10+
  • Recommended: Docker Engine 24.0+
bash
docker version

Docker Compose Version ​

  • Minimum: Docker Compose 1.29+
  • Recommended: Docker Compose 2.22+
bash
docker compose version

Kubernetes ​

Cluster Version ​

  • Minimum: Kubernetes 1.16+
  • Recommended: 1.25+
bash
kubectl version --short

Kubectl Access ​

Verify cluster connection:

bash
kubectl cluster-info
kubectl get nodes

Helm Version ​

  • Minimum: Helm 3.0+
  • Recommended: Helm 3.12+
bash
helm version

RBAC Permissions ​

Required permissions:

  • Create DaemonSets
  • Privileged pods
  • Node access

Public Clouds ​

Cloud ProviderOS/Node ImageKernel VersioneBPF Support
AWS EKSAmazon Linux 2 or 35.10+Required
Google GKEStandard/Hardened5.10+Required
Azure AKSAll node pools (supported OS)5.10+Required
DigitalOcean DOKSUbuntu 22.045.10+Required

Specialized OS Notes

Jibril might not work on some specialized OS images (like Bottlerocket) out-of-the-box. This is because the OS image might not have the required features enabled by default. Talk to us if you need help.

Next Steps ​