add ci

.github/workflows/test-examples.yml

@@ -68,7 +68,11 @@ jobs:
             victim: /bin/bash
             syscall_trace: false
             expected_str: "info"
-
+          - path: libbpf-tools/syscount
+            executable: ./syscount
+            victim: /bin/bash
+            syscall_trace: false
+            expected_str: "info"
     steps:
       - uses: actions/checkout@v2
         with:

example/libbpf-tools/syscount/Makefile

@@ -66,7 +66,7 @@ $(call allow-override,CC,$(CROSS_COMPILE)cc)
 $(call allow-override,LD,$(CROSS_COMPILE)ld)
 
 .PHONY: all
-all: $(APPS)
+all: $(APPS) victim
 
 .PHONY: clean
 clean:
@@ -137,3 +137,5 @@ $(APPS): %: $(OUTPUT)/%.o $(LIBBPF_OBJ) errno_helpers.c syscall_helpers.c | $(OU
 # keep intermediate (.skel.h, .bpf.o, etc) targets
 .SECONDARY:
 
+victim: victim.cpp
+	$(CXX) victim.cpp -Wall -g -o victim

example/libbpf-tools/syscount/victim.cpp

@@ -0,0 +1,22 @@
+#include <cassert>
+#include <cstdio>
+#include <fcntl.h>
+#include <iostream>
+#include <ostream>
+#include <unistd.h>
+int main()
+{
+	while (true) {
+		std::cout << "Opening test.txt" << std::endl;
+
+		int fd = open("test.txt", O_RDONLY | O_CREAT);
+		assert(fd != -1);
+
+		std::cout << "test.txt opened, fd=" << fd << std::endl;
+		usleep(1000 * 300);
+		std::cout << "Closing test.txt..." << std::endl;
+		close(fd);
+		std::cout << "test.txt closed" << std::endl;
+	}
+	return 0;
+}