{"id":13521678,"url":"https://github.com/sysdiglabs/kubectl-capture","last_synced_at":"2025-10-23T06:30:35.179Z","repository":{"id":98014404,"uuid":"170356233","full_name":"sysdiglabs/kubectl-capture","owner":"sysdiglabs","description":"A kubectl plugin which triggers a Sysdig capture","archived":false,"fork":false,"pushed_at":"2023-06-16T00:13:45.000Z","size":20,"stargazers_count":99,"open_issues_count":14,"forks_count":9,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-01-30T17:33:41.311Z","etag":null,"topics":["kubectl","kubectl-plugins","kubernetes","sysdig"],"latest_commit_sha":null,"homepage":"https://sysdig.com/opensource/inspect/","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sysdiglabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-02-12T16:58:34.000Z","updated_at":"2024-11-05T08:37:30.000Z","dependencies_parsed_at":null,"dependency_job_id":"609a0ee6-8ff9-417c-9556-870292198476","html_url":"https://github.com/sysdiglabs/kubectl-capture","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fkubectl-capture","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fkubectl-capture/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fkubectl-capture/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fkubectl-capture/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sysdiglabs","download_url":"https://codeload.github.com/sysdiglabs/kubectl-capture/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":237784905,"owners_count":19365955,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["kubectl","kubectl-plugins","kubernetes","sysdig"],"created_at":"2024-08-01T06:00:37.054Z","updated_at":"2025-10-23T06:30:29.908Z","avatar_url":"https://github.com/sysdiglabs.png","language":"Shell","funding_links":[],"categories":["Shell","kubectl Plugins"],"sub_categories":["Installing plugins via awesome-kubectl-plugins"],"readme":"# Kubectl Sysdig Capture plugin\n\nSysdig is a powerful open source tool for container troubleshooting, performance\ntunning and security investigation.\n\nThis repository implements a `kubectl` plugin which triggers a capture in the\nunderlying host which is running a pod. A capture file is created for a\nduration of time and is download locally in order to use it with\n[Sysdig Inspect](https://sysdig.com/opensource/inspect/).\n\n## Installing\n\nIn order to use this plugin, just copy the `kubectl-capture` to your\nPATH, and ensure it has execution permissions.\n\nYou can verify its installation using `kubectl`:\n\n```bash\n$ kubectl plugin list\nThe following kubectl-compatible plugins are available:\n\n/usr/local/bin/kubectl-capture\n```\n\nIn this case is installed into /usr/local/bin, but will work with another\nlocation listed in PATH.\n\n## Getting started\n\nOnce you have the `kubectl` plugin installed, you can start taking captures:\n\n```bash\n$ kubectl capture nginx-78f5d695bd-bcbd8\nSysdig is starting to capture system calls:\n\nNode: gke-sysdig-work-default-pool-e35da3a1-m8vp\nPod: nginx-78f5d695bd-bcbd8\nDuration: 30 seconds\nParameters for Sysdig: -S -M 30 -pk -z -w /capture-nginx-78f5d695bd-bcbd8-1550246926.scap.gz\n\nThe capture has been downloaded to your hard disk at:\n~/captures/capture-nginx-78f5d695bd-bcbd8-1550246926.scap.gz\n```\n\nAnd then, you can start troubleshooting with [Sysdig Inspect](https://sysdig.com/opensource/inspect/).\n\n### Extra initialization time\n\nWhen the capture container is being spinned, it takes some time to compile the\nSysdig Kernel module and start to capture system calls. You can check the logs\nof the Sysdig Capture Pod if you need to know with accuracy when Sysdig starts\nto capture.\n\n## Parameters\n\nThere are a few parameters for this plugin:\n\n| Flag                   | Description                                                    |\n|------------------------|----------------------------------------------------------------|\n| `-ns` or `--namespace` | The namespace scope of the target Pod                          |\n| `--ebpf`               | Use eBPF probe instead of kernel module for capturing syscalls |\n\n\nAditionally, all the flags for the `sysdig` cli tool are supported. You can\ncheck more of these parameters in its\n[documentation](https://github.com/draios/sysdig/wiki).\n\n## Cleanup\n\nYou can uninstall this plugin from `kubectl` by simply removing it from your\nPATH:\n\n```bash\n$ rm /usr/local/bin/kubectl-capture\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Fkubectl-capture","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsysdiglabs%2Fkubectl-capture","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Fkubectl-capture/lists"}