Interactive Guide to the bpftrace Measurement Workflow
Published: October 5, 2026
Overview
- This nine-step diagram follows one
curlrun inside a container, showing how its execution and file open become bpftrace output lines and then events with a container ID- Executions and file opens by other programs, such as
node, are recorded through the same flow
- Executions and file opens by other programs, such as
- It illustrates the measurement workflow used in Observing Container Execution and File Opens with bpftrace
- The values are illustrative examples; the E, O, and X lines follow the actual script output format
Diagram
JavaScript is required to use this interactive guide.
For measurement results and implementation details, see Observing Container Execution and File Opens with bpftrace. For the periodic-read approach and its sampling limitations, see How to Map Running Container Processes to OS Packages with procfs.
KestreLynx is open-source software that regularly scans images used by running Docker and Kubernetes containers with Trivy and sends changes since the last scan and priorities based on severity, CISA KEV, and EPSS to Slack or a webhook. For Docker and Compose, remediation plans and pull requests (experimental) support remediation from comparing update candidates to creating GitHub pull requests, with both features disabled by default. Users handle merging, rebuilding, and deployment.