Repository navigation
vigil v0.1.7
What's new
- fix: use parent TGID in fork lineage tracepoint for multi-threaded processes
Install
curl -fsSL https://github.com/VectorInstitute/vigil/releases/download/v0.1.7/install.sh | sudo bashOr download the tarball and run sudo ./install.sh manually.
What's included
vigil— daemon binary (amd64 and arm64)vigil.bpf.o— eBPF object (CO-RE, runs on any kernel ≥ 5.15 with BTF)profiles/— built-in profiles: claude-code, gemini-cli, ollama
Requirements
- Linux x86_64 or arm64, kernel ≥ 5.15 with
CONFIG_BPF_LSM=y lsm=bpfin kernel boot parameters