Not using eBPF but I have a draft PR for adding cgroups to the processes table: https://github.com/osquery/osquery/pull/7728

This is so useful that I wish we could have included it in 5.5.0