05/21/2020, 4:59 PM
question for the channel - who's using cgroups with osquery? Looking for stories about this, advice, pitfalls, your settings, etc. <thread>
4:59 PM


05/21/2020, 5:19 PM
@nyanshak I know nothing about this, but recommend reaching out to the ToB folks like @Mike Myers or @alessandrogario It appears they have recommended use of cgroups in the past: https://github.com/osquery/osquery/issues/5234
Mike Myers

Mike Myers

05/21/2020, 11:11 PM
Oh, yea this was a topic he and I had discussed this week. When he gets back he can share stories/advice, I really only am aware that it is an option for additional CPU usage restraint (on Linux).
11:12 PM
In that discussion we thought maybe the performance section of the osquery docs could use some tips like this


05/22/2020, 12:59 AM
Someone here runs osquery with capabilities and not root. I forget who