tracee-testing-guide

name	tracee-testing-guide
description	Run Tracee tests correctly, especially BPF unit tests via make targets. Use when writing tests, debugging test failures, or validating changes before commit.

Tracee Testing Guide

Critical Rule

For BPF-related unit tests, do not run go test directly. Use make test-unit so the required BPF environment is configured.

When To Use This Skill

Use this skill when:

• creating new unit tests for changed behavior
• revising existing *_test.go files after refactors
• fixing flaky tests or false assumptions in assertions
• tightening coverage for bug fixes

Fast Development Commands

• All unit tests: make test-unit
• Package-only: make test-unit PKG=pkg/detectors
• Function-only: make test-unit TEST=TestKernelVersionRequirement_Basic
• Function in package: make test-unit PKG=pkg/ebpf/probes TEST=TestProbeCompatibility_Basic

Other Test Suites

• Integration tests: make test-integration (root required)
• E2E tests: make test-e2e, make test-e2e-net, make test-e2e-kernel (root required)
• Coverage: make coverage, make coverage-html

Troubleshooting

• fatal error: bpf/bpf.h: No such file or directory
  • Use make test-unit instead of direct go test.
• Slow runs
  • Use PKG= and during iteration.