Bump github.com/cilium/ebpf from 0.19.0 to 0.20.0

[dependabot]

Bumps github.com/cilium/ebpf from 0.19.0 to 0.20.0.

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.20.0

Performance Improvements

• btf: Memory-map vmlinux BTF when possible instead of copying to heap (saves several megabytes)
• btf: Decode BTF from byte slices instead of io.Reader for better performance
• btf: Cache BTF during fixups and target search to avoid loading each blob multiple times
• linker: Resolve kernel symbols in a single pass instead of individually
• prog: Speed up opening pinned programs by using minimal program info
• map: Avoid allocations during PerCPUMap batch lookups (76% faster, 99% fewer allocations)

New Features

• btf: Added LoadSplitSpec function for easier use of split-BTF files
• btf: Accept empty string tables in BTF data
• link: Added Detach() method for explicitly detaching links
• map: Preliminary support for arena maps
• map: Parse and expose map_extra field in MapSpec (enables bloom filter configuration)
• prog: Allow explicit ifindex specification when loading programs
• prog: Support getting context output from syscall programs
• prog: Allow passing extra targets for CO-RE relocations via ExtraRelocationTargets
• bpf2go: Allow multiple commands in BPF2GO_CC environment variable (e.g., ccache clang)
• tracefs: Allow hyphens in tracepoint group names
• kallsyms: Return ErrRestrictedKernel when reading zero addresses due to kernel.kptr_restrict
• info: Return ErrRestrictedKernel when program info is restricted by kernel security settings
• prog: Tolerate ErrRestrictedKernel during ksym resolution unless ksyms are required

Bugfixes

• ringbuf: Fixed panic when reading after close
• btf: Fixed race condition when loading cached kernel/module specs
• ringbuf: Fixed 32-bit compatibility by using uintptr for positions
• memory: Set cleanup on *Memory instead of **Memory to fix resource leak
• link: Fixed concurrent cleanup ordering for perf events and tracefs events

Windows Support Improvements

• ringbuf: Added Windows support for ring buffer operations
• windows: Fixed compatibility with recent eBPF for Windows changes (XDP_TEST removal, SAMPLE program type)
• windows: Enabled Hyper-V support in test VMs
• program: Added workaround for eBPF for Windows rejecting empty ContextOut

Breaking Changes

ProgramOptions.KernelModuleTypes removed

The KernelModuleTypes field in ProgramOptions has been removed. In 99% of cases this field should not be necessary anymore. Module BTF should be merged into the vmlinux BTF, as tools like btfhub do.

For advanced use cases that still require passing additional BTF specs for CO-RE relocations, use the new ExtraRelocationTargets field:

Before:

... (truncated)

Commits

• c64ffee struct_ops: skip copy for zeroed nested structs and fail on non-zeroed
• 843f326 docs: document how to build parts of efW
• 8f23ed6 map, program: add StructOpsMap support
• e6e4707 ci: install sample_ebpf_ext to provide BPF_PROG_TYPE_SAMPLE
• e5c623f windows: deal with removal of XDP_TEST from efW
• c41a50a program: work around efW rejecting an empty ContextOut
• 9a014ef kallsyms: return ErrRestrictedKernel when reading zero address
• 1bfe0bc info: return ErrRestrictedKernel when program info is restricted
• c27ff92 staticcheck.conf: temporarily disable SA4003
• e653f17 *: convert "go:generate go run ..." to "go:generate go tool ..."
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign mariomac for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.