feat: add containers/conmon

[takumin]

containers/conmon: An OCI container runtime monitor

$ aqua g -i containers/conmon

Check List

• Read CONTRIBUTING.md
  • Read OSS Contribution Guide
• All commits are signed
  • This repository enables Require signed commits, so all commits must be signed
• Avoid force push
• Do only one thing in one Pull Request
• Execute cmdx s to scaffold code
• Install and execute the package and confirm if the package works well

How to confirm if this package works well

Reviewers aren't necessarily familiar with this package, so please describe how to confirm if this package works well.
Please confirm if this package works well yourself as much as possible.

Command and output

$ cmdx con linux amd64
+ bash scripts/connect.sh
[INFO] Connecting to the container aqua-registry (linux/amd64)
root@2076104ac44c:/workspace# conmon -h
Usage:
  conmon.amd64 [OPTION?] - conmon utility

Help Options:
  -h, --help                   Show help options

Application Options:
  --api-version                Conmon API version to use
  -b, --bundle                 Location of the OCI Bundle path
  -c, --cid                    Identification of Container
  -P, --conmon-pidfile         PID file for the conmon process
  -p, --container-pidfile      PID file for the initial pid inside of container
  -u, --cuuid                  Container UUID
  -e, --exec                   Exec a command into a running container
  --exec-attach                Attach to an exec session
  --exec-process-spec          Path to the process spec for execution
  --exit-command               Path to the program to execute when the container terminates its execution
  --exit-command-arg           Additional arg to pass to the exit command.  Can be specified multiple times
  --exit-delay                 Delay before invoking the exit command (in seconds)
  --exit-dir                   Path to the directory where exit files are written
  --leave-stdin-open           Leave stdin open when attached client disconnects
  --log-level                  Print debug logs based on log level
  -l, --log-path               Log file path
  --log-size-max               Maximum size of log file
  --log-global-size-max        Maximum size of all log files
  --log-tag                    Additional tag to use for logging
  -n, --name                   Container name
  --no-new-keyring             Do not create a new session keyring for the container
  --no-pivot                   Do not use pivot_root
  --no-sync-log                Do not manually call sync on logs after container shutdown
  -0, --persist-dir            Persistent directory for a container that can be used for storing container data
  --replace-listen-pid         Replace listen pid if set for oci-runtime pid
  --restore                    Restore a container from a checkpoint
  -r, --runtime                Path to store runtime data for the container
  --runtime-arg                Additional arg to pass to the runtime. Can be specified multiple times
  --runtime-opt                Additional opts to pass to the restore or exec command. Can be specified multiple times
  --sdnotify-socket            Path to the host's sd-notify socket to relay messages to
  --socket-dir-path            Location of container attach sockets
  -i, --stdin                  Open up a pipe to pass stdin to the container
  --sync                       Keep the main conmon process as its child by only forking once
  --syslog                     Log to syslog (use with cgroupfs cgroup manager)
  -s, --systemd-cgroup         Enable systemd cgroup manager, rather then use the cgroupfs directly
  -t, --terminal               Allocate a pseudo-TTY. The default is false
  -T, --timeout                Kill container after specified timeout in seconds.
  --version                    Print the version and exit
  --full-attach                Don't truncate the path to the attach socket. This option causes conmon to ignore --socket-dir-path
  --seccomp-notify-socket      Path to the socket where the seccomp notification fd is received
  --seccomp-notify-plugins     Plugins to use for managing the seccomp notifications

If files such as configuration file are needed, please share them.

Reference

• https://github.com/containers/conmon

[suzuki-shunsuke]

Thank you!

[suzuki-shunsuke]

🎉 https://github.com/aquaproj/aqua-registry/releases/tag/v4.354.0