Based on the research, the answer is yes, but it depends on the specific minor version of Rocky Linux 8 you are running.
The "default kernel" for Rocky Linux 8 is version 4.18.0, which is technically older than the official minimum (5.8+) required for the modern eBPF driver. However, Red Hat (and thus Rocky Linux) has extensively backported the necessary BPF features to later updates of this kernel.
Here is the detailed breakdown:
If you are running a fully updated Rocky Linux 8 system (e.g., 8.7, 8.8, 8.9, or 8.10), the default kernel (currently 4.18.0-5xx) includes the two critical features required for the modern eBPF probe:
- BTF (BPF Type Format): Enabled in RHEL/Rocky 8 kernels starting roughly around version 8.2/8.3.
- BPF Ring Buffer: Backported in later RHEL/Rocky 8 releases (verified present in 8.7+ release notes).