ingero

Live eBPF tracing (requires privileges + kernel mounts)

docker run --rm --privileged --pid=host \ -v /sys/kernel/debug:/sys/kernel/debug \ -v /sys/kernel/btf:/sys/kernel/btf:ro \ -v /var/lib/ingero:/var/lib/ingero \ ghcr.io/ingero-io/ingero trace --record

Minimum capabilities (alternative to `--privileged`): `--cap-add=BPF --cap-add=PERFMON --cap-add=SYS_ADMIN`.

> **Note:** eBPF tracing (`trace`, `demo --gpu`) requires `--privileged --pid=host` plus the kernel volume mounts shown above. Without these, only unprivileged commands work (`demo --no-gpu`, `check`, `version`, `explain`, `query`). The `--pid=host` flag shares the host's `/proc`  -  do **not** also bind-mount `-v /proc:/proc:ro` as this causes OCI runtime errors on Docker Desktop and WSL2.

**Data persistence:** The container stores the SQLite database at `/var/lib/ingero/ingero.db` by default. Mount `-v /var/lib/ingero:/var/lib/ingero` to persist data after the container stops. Without this mount, **all trace data is lost** when the container exits.

**Multiple databases:** Use `--db` or the `INGERO_DB` env var to work with different databases:

Quick setup: install all build dependencies (Go, clang, llvm) on Ubuntu 22.04/24.04

curl -fsSL https://raw.githubusercontent.com/ingero-io/ingero/main/scripts/install-deps.sh | bash

Requires clang-14, Linux kernel with BTF

git clone https://github.com/ingero-io/ingero.git cd ingero make # generates eBPF bindings, builds, tests, and lints - single command sudo make install # optional - copies binary to /usr/local/bin/ingero # or just use ./bin/ingero directly, or: alias ingero=$PWD/bin/ingero ```

Requirements

• Linux kernel 5.15+ with BTF (CONFIG_DEBUG_INFO_BTF=y)
• NVIDIA driver 550+ with CUDA 11.x, 12.x, or 13.x
• Root / CAP_BPF + CAP_PERFMON (eBPF requires elevated privileges)
• Tested on: GH200, H100, A100, A10, RTX 4090, RTX 3090 (x86_64 and aarch64)

Install (Linux amd64; arm64 / Docker / source variants are below)

ingero-version:install-curl product=ingero channel=stable

VERSION=0.18.0 curl -fsSL "https://github.com/ingero-io/ingero/releases/download/v${VERSION}/ingero_${VERSION}_linux_amd64.tar.gz" | tar xz sudo mv ingero /usr/local/bin/

Install

ingero-version:install-archive-amd64 product=ingero channel=stable

VERSION=0.18.0 curl -fsSL "https://github.com/ingero-io/ingero/releases/download/v${VERSION}/ingero_${VERSION}_linux_amd64.tar.gz" | tar xz sudo mv ingero /usr/local/bin/

ingero-version:install-archive-arm64 product=ingero channel=stable

VERSION=0.18.0 curl -fsSL "https://github.com/ingero-io/ingero/releases/download/v${VERSION}/ingero_${VERSION}_linux_arm64.tar.gz" | tar xz sudo mv ingero /usr/local/bin/ ```

Docker Image

Multi-arch images (amd64 + arm64) are published to GHCR on every release:

```bash

ingero-version:docker-pull-example product=ingero channel=stable

docker pull ghcr.io/ingero-io/ingero:v0.18.0

ingero-version:docker-build-arg product=ingero channel=stable

docker build -f deploy/docker/Dockerfile \ --build-arg VERSION=0.18.0 \ --build-arg COMMIT=$(git rev-parse --short HEAD) \ --build-arg BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ) \ -t ingero:local . ```

GHCR images have version info baked in automatically via GoReleaser. See deploy/docker/Dockerfile for details.

Build from Source

```bash

Reference

Integrations

Compare databases from different runs

docker run --rm \ -v /var/lib/ingero:/var/lib/ingero \ ghcr.io/ingero-io/ingero query --db /var/lib/ingero/training-run-41.db --since 1h

docker run --rm \ -v /var/lib/ingero:/var/lib/ingero \ ghcr.io/ingero-io/ingero query --db /var/lib/ingero/training-run-42.db --since 1h

The image is ~10 MB (Alpine 3.20 + statically linked Go binary). When building the dev Dockerfile locally, pass version info via build args: