question for the channel - who's using cgroups with osquery?
Looking for stories about this, advice, pitfalls, your settings, etc. <thread>
nyanshak
05/21/2020, 4:59 PM
👋
f
fritz
05/21/2020, 5:19 PM
@nyanshak I know nothing about this, but recommend reaching out to the ToB folks like @Mike Myers or @alessandrogario It appears they have recommended use of cgroups in the past: https://github.com/osquery/osquery/issues/5234
m
Mike Myers
05/21/2020, 11:11 PM
Oh, yea this was a topic he and I had discussed this week. When he gets back he can share stories/advice, I really only am aware that it is an option for additional CPU usage restraint (on Linux).
Mike Myers
05/21/2020, 11:12 PM
In that discussion we thought maybe the performance section of the osquery docs could use some tips like this
s
seph
05/22/2020, 12:59 AM
Someone here runs osquery with capabilities and not root. I forget who