Over the past years, DevConf.CZ featured several talks on bpftrace, an eBPF-powered observability tool for Linux. Most of the talks shared the same selling point - bpftrace is awesome at writing powerful one-liners, usually straight in the command line, to trace practically any part of your system.

While this remains an important capability, the eBPF ecosystem has evolved into a point where users want to write complex applications intended to run and be maintained for long periods of time. This is where bpftrace has struggled historically, however, users still value its simple domain-specific language, which allows to abstract away complexities of eBPF program development.

Things have recently started to change in this area and bpftrace gained several new features which evolve it into flexible and composable framework and language. In this talk, we will present these new features and show you that today, bpftrace should be your default choice for an observability tool on Linux.