System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running a pre-flight DaemonSet Upgrading Micro Versions behavior appropriate for each container. Compiles the BPF programs to bytecode using clang/LLVM [h�ps://clang.llvm.org/] and passes them to the Linux kernel to run for all packets in / out of the container’s running the cilium/cilium container image) these addi�onal requirements must be met: clang+LLVM [h�ps://llvm.org] >=5.0 (Recommended: >=7.0) iproute2 [h�ps://www.kernel.org/pub/linux/u�ls/net/iproute2/]

Compatibility Matrix Linux Kernel Advanced Features and Required Kernel Version Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running pre-flight check (Required) Upgrading behavior appropriate for each container. Compiles the BPF programs to bytecode using clang/LLVM [https://clang.llvm.org/] and passes them to the Linux kernel to run for all packets in / out of the container’s running the cilium/cilium container image) these additional requirements must be met: clang+LLVM [https://llvm.org] >=5.0 (Recommended: >=7.0) iproute2 [https://www.kernel.org/pub/linux/utils/net/iproute2/]

Compatibility Matrix Linux Kernel Advanced Features and Required Kernel Version Key-Value store clang+LLVM iproute2 Firewall Rules Privileges Upgrade Guide Running pre-flight check (Required) Upgrading Cilium Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM iproute2 bpftool BPF sysctls Kernel Testing JIT Debugging Introspection Tracing pipe Miscellaneous behavior appropriate for each container. Compiles the BPF programs to bytecode using clang/LLVM [https://clang.llvm.org/] and passes them to the Linux kernel to run for all packets in / out of the container’s

Compatibility Matrix Linux Kernel Required Kernel Versions for Advanced Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM iproute2 bpftool BPF sysctls Kernel Testing JIT Debugging Introspection Tracing pipe Miscellaneous running the cilium/cilium container image) these additional requirements must be met: clang+LLVM [https://llvm.org] >= 10.0 iproute2 [https://www.kernel.org/pub/linux/utils/net/iproute2/] with BPF templating

& Considerations Linux Kernel Required Kernel Versions for Advanced Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM iproute2 bpftool BPF sysctls Kernel Testing JIT Debugging Introspection Tracing pipe Miscellaneous running the cilium/cilium container image) these additional requirements must be met: clang+LLVM [https://llvm.org] >= 10.0 iproute2 [https://www.kernel.org/pub/linux/utils/net/iproute2/] with eBPF templating

Compatibility Matrix Linux Kernel Required Kernel Versions for Advanced Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM iproute2 bpftool BPF sysctls Kernel Testing JIT Debugging Introspection Tracing pipe Miscellaneous running the cilium/cilium container image) these additional requirements must be met: clang+LLVM [https://llvm.org] >= 10.0 iproute2 [https://www.kernel.org/pub/linux/utils/net/iproute2/] with eBPF templating

& Considerations Linux Kernel Required Kernel Versions for Advanced Features Key-Value store clang+LLVM iproute2 Firewall Rules Mounted eBPF filesystem Privileges Upgrade Guide Running pre-flight check Object Pinning Tail Calls BPF to BPF Calls JIT Hardening Offloads Toolchain Development Environment LLVM iproute2 bpftool BPF sysctls Kernel Testing JIT Debugging Introspection Tracing pipe Miscellaneous running the cilium/cilium container image) these additional requirements must be met: clang+LLVM [https://llvm.org] >= 10.0 iproute2 [https://www.kernel.org/pub/linux/utils/net/iproute2/] with eBPF templating