2025-07-21 01:33 UTC+0800 ~ Tao Chen <chen.dylane@xxxxxxxxx>
> Add bpftool-token manpage with information and examples of token-related
> commands.
>
> Signed-off-by: Tao Chen <chen.dylane@xxxxxxxxx>
> ---
> .../bpftool/Documentation/bpftool-token.rst | 68 +++++++++++++++++++
> 1 file changed, 68 insertions(+)
> create mode 100644 tools/bpf/bpftool/Documentation/bpftool-token.rst
>
> diff --git a/tools/bpf/bpftool/Documentation/bpftool-token.rst b/tools/bpf/bpftool/Documentation/bpftool-token.rst
> new file mode 100644
> index 00000000000..177f93c0bc7
> --- /dev/null
> +++ b/tools/bpf/bpftool/Documentation/bpftool-token.rst
> @@ -0,0 +1,68 @@
> +.. SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause)
> +
> +================
> +bpftool-token
> +================
> +-------------------------------------------------------------------------------
> +tool for inspection and simple manipulation of eBPF progs
Copy-pasted from bpftool-prog.rst, please update.
> +-------------------------------------------------------------------------------
> +
> +:Manual section: 8
> +
> +.. include:: substitutions.rst
> +
> +SYNOPSIS
> +========
> +
> +**bpftool** [*OPTIONS*] **token** *COMMAND*
> +
> +*OPTIONS* := { |COMMON_OPTIONS| }
> +
> +*COMMANDS* := { **show** | **list** | **help** }
> +
> +TOKEN COMMANDS
> +===============
> +
> +| **bpftool** **token** { **show** | **list** }
> +| **bpftool** **token help**
> +|
> +
> +DESCRIPTION
> +===========
> +bpftool token { show | list }
> + List all the concrete allowed_types for cmds maps progs attachs
> + and the bpffs mount_point used to set the token info.
This is not a summary, please let's use a more verbose description and
avoid abbreviations:
List all the concrete allowed types for **bpf**\ () system call
commands, maps, programs, and attach types, as well as the
*bpffs* mount point used to set the token information.
What is a "concrete" allowed_type?
> +
> +bpftool prog help
> + Print short help message.
> +
> +OPTIONS
> +========
> +.. include:: common_options.rst
> +
> +EXAMPLES
> +========
> +|
> +| **# mkdir -p /sys/fs/bpf/token**
> +| **# mount -t bpf bpffs /sys/fs/bpf/token** \
> +| **-o delegate_cmds=prog_load:map_create** \
> +| **-o delegate_progs=kprobe** \
> +| **-o delegate_attachs=xdp**
> +| **# bpftool token list**
> +
> +::
> +
> + token_info:
> + /sys/fs/bpf/token
> +
> + allowed_cmds:
> + map_create prog_load
> +
> + allowed_maps:
> +
> + allowed_progs:
> + kprobe
> +
> + allowed_attachs:
> + xdp
> +
Please also update bpftool's bash completion file. I think it should be:
diff --git i/tools/bpf/bpftool/bash-completion/bpftool w/tools/bpf/bpftool/bash-completion/bpftool
index a759ba24471d..3f119d7eae96 100644
--- i/tools/bpf/bpftool/bash-completion/bpftool
+++ w/tools/bpf/bpftool/bash-completion/bpftool
@@ -1215,6 +1215,17 @@ _bpftool()
;;
esac
;;
+ token)
+ case $command in
+ show|list)
+ return 0
+ ;;
+ *)
+ [[ $prev == $object ]] && \
+ COMPREPLY=( $( compgen -W 'help show list' -- "$cur" ) )
+ ;;
+ esac
+ ;;
esac
} &&
complete -F _bpftool bpftool
