Skip to content
An OCI container runtime monitor.
C Shell Makefile Meson Go
Branch: master
Clone or download
rhatdan Merge pull request #74 from haircommander/conn_sock_config
Add CONN_SOCK_BUF_SIZE to config
Latest commit 422ce21 Sep 18, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
.rpmbuild Initial PAPR CI check-in Oct 2, 2018
cmd/conmon-config Add CONN_SOCK_BUF_SIZE to config Sep 17, 2019
contrib Build CRI-O from master instead of RPM Jun 27, 2019
hack Add cmd/config/config.go (#41) Jun 13, 2019
runner/config Add CONN_SOCK_BUF_SIZE to config Sep 17, 2019
src Add CONN_SOCK_BUF_SIZE to config Sep 17, 2019
.clang-format Add .clang-format file May 22, 2019
.gitignore Add cmd/config/config.go (#41) Jun 13, 2019
LICENSE remove appendix Jun 17, 2019
Makefile add badge Jul 30, 2019
VERSION bump to v2.0.2-dev Sep 13, 2019
changelog.txt Add Changelog Aug 5, 2019 add installation guide Jul 30, 2019 Fix linker error due to missing source files Jun 21, 2019

Total alerts


An OCI container runtime monitor.

Conmon is a monitoring program and communication tool between a container manager (like podman or CRI-O) and an OCI runtime (like runc or crun) for a single container.

Upon being launched, it double-forks to daemonize and detach from the parent that launched it. It then launches the runtime as its child. This allows managing processes to die in the foreground, but still be able to watch over and connect to the child process (the container).

While the container runs, conmon does two things:

  • Provides a socket for attaching to the container, holding open the container's standard streams and forwarding them over the socket.
  • Writes the contents of the container's streams to a log file (or to the systemd journal) so they can be read after the container's death.

Finally, upon the containers death, conmon will record its exit time and code to be read by the managing programs.

Written in C and designed to have a low memory footprint, conmon is intended to be run by a container managing library. Essentially, conmon is the smallest daemon a container can have.

You can’t perform that action at this time.