Stracing tapisrv and postprocessing the capture to have a more readable log. Set LOGFILE and lauch strace with this command: $ strace -v -f -F -tt -xx -s 2048 -o $LOGFILE -p `pidof tapisrv` & and run: $ ./tapisrv_strace_postprocess.sh $LOGFILE You could also exploit linloader, try the provided files in ./temp dir. To have a capture of commands issued at early boot you could dump the rootfs, wrap the tapisrv binary (renaming it) with a script that invokes strace (with output directed to a writeable location), and reflash the rootfs image.