psc: A Container-Aware Process Scanner Using eBPF and CEL for Flexible System Monitoring
By
tanelpoder
The kind of bagel that ruins lesser bagels for you.
Summary
psc (ps container) is a new process scanning tool that combines eBPF iterators for kernel-level access to process data with Google's Common Expression Language (CEL) for flexible querying. Unlike traditional Linux tools like ps, lsof, and ss that output fixed formats requiring extensive text processing, psc provides precise filtering with full container context awareness. The tool offers fast performance by reading directly from kernel data structures and enables readable, expressive queries through CEL syntax.
Key quotes
· 4 pulledpsc (ps container) is a fast process scanner that uses eBPF iterators and Google CEL to query system state with precision and full container context.
psc uses eBPF iterators to read process and file descriptor information directly from kernel data structures.
Traditional Linux tools like ps, lsof, and ss are powerful but inflexible. They output fixed formats that require extensive piping through grep, awk, and sed.
psc uses the Common Expression Language (CEL) to filter processes.
You might also wanna read
systemd-manager-tui: A Terminal-Based Tool for Managing systemd Services
A TUI (Terminal User Interface) application called systemd-manager-tui, available on GitHub, allows users to manage systemd services via D-B
github.com·28d ago
GTFOBins: A Curated List of Unix Binaries for Bypassing Local Security Restrictions
GTFOBins is a curated list of Unix-like binaries that can be exploited to bypass local security restrictions in misconfigured systems. The l
gtfobins.org·1mo ago
How to Enable ZRAM on Linux Systems for Better Memory Optimization
The article discusses enabling ZRAM (compressed RAM) on Linux systems to optimize memory usage and potentially save money on hardware upgrad
cnx-software.com·1mo ago
Cells for NetBSD: Kernel-Enforced Isolation System with Practical Operations
Cells for NetBSD is a kernel-enforced isolation system for the NetBSD operating system that provides jail-like containerization with practic
netbsd-cells.petermann-digital.de·1mo ago
Understanding Linux Compressed Swap: zswap vs zram Technical Comparison and Recommendations
This article provides expert guidance on Linux memory management technologies zswap and zram, explaining their fundamental differences and o
chrisdown.name·2mo ago
Direct Disk Installation: Creating a Linux Distro That Installs via curl > /dev/sda
The article describes a technical experiment where the author created a Linux distribution that can be installed by directly piping a disk i