question for the channel - who's using cgroups with osquery? Looking for stories about this, advice, pitfalls, your settings, etc. <thread>

@nyanshak I know nothing about this, but recommend reaching out to the ToB folks like @Mike Myers or @alessandrogario It appears they have recommended use of cgroups in the past: https://github.com/osquery/osquery/issues/5234

Oh, yea this was a topic he and I had discussed this week. When he gets back he can share stories/advice, I really only am aware that it is an option for additional CPU usage restraint (on Linux).

Someone here runs osquery with capabilities and not root. I forget who