https://github.com/karantan/beagle
Lightweight tool for finding long running processes and potentially isolating them
https://github.com/karantan/beagle
Last synced: about 2 months ago
JSON representation
Lightweight tool for finding long running processes and potentially isolating them
- Host: GitHub
- URL: https://github.com/karantan/beagle
- Owner: karantan
- License: bsd-3-clause
- Created: 2022-10-07T11:15:08.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2022-10-18T15:12:24.000Z (over 2 years ago)
- Last Synced: 2025-02-13T15:53:54.667Z (4 months ago)
- Language: Go
- Size: 58.6 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Beagle 
Beagle is a lightweight tool for finding long-running processes and potentially isolating
them. It also reports its findings on Slack (if configured).
The beagle is a breed of small scent hound. It was developed primarily for hunting rabbits.
They possess a great sense of smell and superior tracking instincts, and this is precisely
what we need when we want to find suspicious processes.
PHP-FPM child processes are usually short-lived, so if we see a PHP-FPM pool running
for several hours then this could indicate that there is some malicious code running
without us knowing about it.
Beagle (tool) will find it, report it and potentially isolate it in a separate cgroup
where it can be controlled until we figure out what to do with it.
## Configuration
By default Beagle will always report to the stdout.
Set `SLACK_NOTIFICATION` env var (Incoming WebHook url) if you want slack notifications
and make sure you provide slack channel information via `-slack` flag.
All other settings are set via flags. Run it with `--help` to see all the options.
## Nix
Build it with nix by running:
```bash
$ nix-build -E "with import {}; callPackage ./default.nix {}"
```
Add it to NixOS:
```bash
{ config, pkgs, lib, ... }:
let
psusage = pkgs.callPackage (import (fetchGit {
url = "[email protected]:karantan/beagle";
ref = "master";
rev = ""; # v1.x.y
})) { };
in {
environment.systemPackages = [
beagle
];
}
```