package secbench

import "gvisor.dev/gvisor/test/secbench"

The runner binary executes a single benchmark run and prints out results. Because seccomp-bpf filters cannot be removed from a process, this runs as a subprocess of the secbench library. This requires the ability to write(2) to stdout even after installing the seccomp-bpf filter.

Package secbench provides utilities for benchmarking seccomp-bpf filters.

Index ¶

• func BenchFromSyscallRules(b *testing.B, name string, profile secbenchdef.Profile, rules seccomp.SyscallRules, denyRules seccomp.SyscallRules, options seccomp.ProgramOptions) secbenchdef.Bench
• func Run(b *testing.B, bns ...secbenchdef.Bench)
• func RunBench(b *testing.B, bn secbenchdef.Bench)

Functions ¶

func BenchFromSyscallRules ¶

func BenchFromSyscallRules(b *testing.B, name string, profile secbenchdef.Profile, rules seccomp.SyscallRules, denyRules seccomp.SyscallRules, options seccomp.ProgramOptions) secbenchdef.Bench

BenchFromSyscallRules returns a new Bench created from SyscallRules.

func Run ¶

func Run(b *testing.B, bns ...secbenchdef.Bench)

Run runs a set of Benches.

func RunBench ¶

func RunBench(b *testing.B, bn secbenchdef.Bench)

RunBench runs a single Bench.

Source Files ¶

runner.go secbench.go

Directories ¶