A couple of weeks ago VRF support has been enabled in the raspbian kernel via ae5fd2e, and that's truly awesome. Many applications may use VRFs now, but sometimes there is no other way for running an vrf-unaware application than using the 'ip vrf exec' command. 'ip vrf exec' lauches an application and makes sure that said application is bound to a VRF, and that it uses the vrf-associated routing table instead of the default (0) rtable.

Unfortunately, 'ip vrf exec' cannot be used on Raspbian for the time being, as it appears to be missing CGROUP_BPF. For example trying to bind dhclient to a VRF leads to an error message:

root@raspberrypi:~# ip vrf exec myvrf dhclient -nw
Failed to load BPF prog: 'Function not implemented'
Kernel compiled with CGROUP_BPF enabled?
root@raspberrypi:~#

Would it be possible to enabled CGROUP_BPF please?