Kernel Portability with CO-RE

BPF CO-RE (Compile Once, Run Everywhere) enables eBPF programs to adapt to differences in kernel type layouts at load time. For an introduction to its design and components, see Andrii Nakryiko’s BPF CO-RE overview. This chapter covers CO-RE support in Rust and Aya and a practical workflow for using Rust with C shims.