fix: Add intelligent eBPF object file path resolution

- Fix inconsistent path handling for sentinel.bpf.o across different working directories
- Add fallback path resolution in both lib.rs and real_ebpf_tests.rs
- Eliminate "No such file or directory" errors when running from different directories
- Support execution from both project root and kernel-agent subdirectory

Author: harrison001

kernel-agent/src/lib.rs

@@ -350,9 +350,36 @@ impl EbpfLoader {
 
     #[cfg(target_os = "linux")]
     async fn initialize_linux(&self) -> Result<Object> {
-        let mut object = ObjectBuilder::default()
-            .open_file("kernel-agent/src/sentinel.bpf.o")
-            .context("Cannot open eBPF object file")?
+        // Try multiple possible paths for the eBPF object file
+        let possible_paths = [
+            "src/sentinel.bpf.o",                    // When running from kernel-agent directory
+            "kernel-agent/src/sentinel.bpf.o",      // When running from project root
+            "./src/sentinel.bpf.o",                 // Explicit relative path
+            "./kernel-agent/src/sentinel.bpf.o",    // Explicit relative path from root
+        ];
+        
+        let mut object_builder = None;
+        let mut last_error = None;
+        
+        for path in &possible_paths {
+            match ObjectBuilder::default().open_file(path) {
+                Ok(builder) => {
+                    debug!("Successfully found eBPF object at: {}", path);
+                    object_builder = Some(builder);
+                    break;
+                }
+                Err(e) => {
+                    debug!("Failed to open eBPF object at {}: {}", path, e);
+                    last_error = Some(e);
+                }
+            }
+        }
+        
+        let mut object = object_builder
+            .ok_or_else(|| {
+                anyhow::anyhow!("Cannot find eBPF object file at any of the expected paths: {:?}. Last error: {:?}", 
+                    possible_paths, last_error)
+            })?
             .load()
             .context("Cannot load eBPF program")?;
 

kernel-agent/src/real_ebpf_tests.rs

@@ -147,9 +147,27 @@ impl RealEbpfTester {
                 source: e
             })?;
 
-        // Use correct relative path from current working directory
-        println!("✅ Using working eBPF object: src/sentinel.bpf.o");
-        let bpf_object_path = "src/sentinel.bpf.o";
+        // Try multiple possible paths for the eBPF object file
+        let possible_paths = [
+            "src/sentinel.bpf.o",                    // When running from kernel-agent directory
+            "kernel-agent/src/sentinel.bpf.o",      // When running from project root
+            "./src/sentinel.bpf.o",                 // Explicit relative path
+            "./kernel-agent/src/sentinel.bpf.o",    // Explicit relative path from root
+        ];
+        
+        let mut bpf_object_path = None;
+        for path in &possible_paths {
+            if std::path::Path::new(path).exists() {
+                println!("✅ Using working eBPF object: {}", path);
+                bpf_object_path = Some(path);
+                break;
+            }
+        }
+        
+        let bpf_object_path = bpf_object_path
+            .ok_or_else(|| crate::error::SentinelError::EbpfLoad(
+                format!("Cannot find eBPF object file at any of the expected paths: {:?}", possible_paths)
+            ))?;
 
         let compile_output = std::process::Output {
             status: std::process::ExitStatus::from_raw(0),