https://github.com/osquery/osquery logo
Title
n

nyanshak

05/21/2020, 4:59 PM
question for the channel - who's using cgroups with osquery? Looking for stories about this, advice, pitfalls, your settings, etc. <thread>
👋
f

fritz

05/21/2020, 5:19 PM
@nyanshak I know nothing about this, but recommend reaching out to the ToB folks like @Mike Myers or @alessandrogario It appears they have recommended use of cgroups in the past: https://github.com/osquery/osquery/issues/5234
m

Mike Myers

05/21/2020, 11:11 PM
Oh, yea this was a topic he and I had discussed this week. When he gets back he can share stories/advice, I really only am aware that it is an option for additional CPU usage restraint (on Linux).
In that discussion we thought maybe the performance section of the osquery docs could use some tips like this
s

seph

05/22/2020, 12:59 AM
Someone here runs osquery with capabilities and not root. I forget who