conmon(8)

📦
version 2.2.1 · 6 versions
, in alpine 3.24, fedora 43, fedora 44

💖 NAME 💖

conmon — the container monitor utility, bestie. it watches ur containers so u don't have to 🫶

✨ SYNOPSIS ✨

conmon [options]

🌸 DESCRIPTION 🌸

okay so conmon is a command-line program for monitoring and managing the lifecycle of Linux containers that follow the Open Container Initiative (OCI) format. that's the whole vibe. it's giving babysitter for ur containers, and honestly? it ate. 👑

🎀 APPLICATION OPTIONS 🎀

  • --api-version — which Conmon API version u wanna use, queen's choice ✨
  • -b, --bundle — location of the OCI Bundle path. where the bundle lives, fr fr 📦
  • -c, --cid — identification of Container. its lil name tag 💅
  • --exec-attach — attach to an exec session. come thru and vibe with it 🦋
  • -e, --exec — exec a command into a running container. slide into its DMs, basically 😌
  • --exec-process-spec — path to the process spec for execution. the receipts for how it should run 📝
  • --exit-command — path to the program to execute when the container terminates its execution. the goodbye party planner 🎉
  • --exit-command-arg — additional arguments to pass to the exit command. Can be specified multiple times. stack 'em up, no cap 🥞
  • --exit-delay — delay before invoking the exit command (in seconds). a lil dramatic pause ⏳
  • --exit-dir — path to the directory where exit files are written. where the receipts get filed 🗂️
  • --full-attach — Don't truncate the path to the attach socket. This option causes conmon to ignore --socket-dir-path. full path only, no cutting corners 💯
  • -h, --help — Show help options. when u need the tea ☕
  • -i, --stdin — Open up a pipe to pass stdin to the container. This option tells conmon to setup the pipe regardless of whether there is a terminal connection. pipe it up, terminal or not 🚰
  • -l, --log-path — path to store all stdout and stderr messages from the container. every last word gets written down 📓
  • --leave-stdin-open — Leave stdin open when the attached client disconnects. don't ghost it, keep the door open 🚪
  • --log-level — Print debug logs based on the log level. set the volume on the gossip 🔊
  • --log-max-files — Maximum number of log backup files to keep when log rotation is enabled. Default is 1. (yes bestie, the default is literally 1) 1️⃣
  • --log-rotate — Enable log rotation instead of log truncation. When enabled, log files are rotated with numbered suffixes (.1, .2, etc.) instead of being truncated when they reach the maximum size. glow-up instead of deletion ✨
  • --log-size-max — Maximum size of the log file (in bytes). the cap on one file 📏
  • --log-global-size-max — Maximum size of all log files combined (in bytes). the cap on the whole friend group 📐
  • --log-tag — Additional tag to use for logging. a lil nickname for ur logs 🏷️
  • --log-allowlist-dir — Specifies allowed directories for log file creation. This option can be specified multiple times to allow multiple directories. When configured, log files can only be created within these allowed directories or their subdirectories. If not specified, log files can be created in any location. the VIP list for where logs are allowed to exist 🎟️
  • --log-label — Additional label to use for logging. The accepted format is LABEL=VALUE. Can be specified multiple times. Note that LABEL must contain only uppercase letters, numbers and underscore character. so like VIBE=IMMACULATE but NOT vibe=immaculate, got it? 🔠
  • --no-container-partial-message — Do not set CONTAINER_PARTIAL_MESSAGE=true for partial lines in journald logs. This prevents splitting of long log lines into multiple journal entries, which can be problematic for systems that parse structured logs like JSON. Only affects journald log driver. keeping long lines whole so the JSON girlies don't cry 😭
  • -n, --name — Container name. what u call it 🍼
  • --no-new-keyring — Do not create a new session keyring for the container. no new keys, we good 🔑
  • --no-pivot — Do not use pivot_root. no pivot today, we're staying put 🛑
  • --no-sync-log — Do not manually call sync on logs after container shutdown. skipping the last-minute save 💾
  • -0, --persist-dir — Persistent directory for a container that can be used for storing container data. its permanent little home 🏠
  • -p, --container-pidfile — PID file for the initial pid inside of the container. the OG pid's address 📍
  • -P, --conmon-pidfile — PID file for the conmon process. conmon's own address, main character behavior 👑
  • -r, --runtime — Path to store runtime data for the container. where the runtime keeps its stuff 🎒
  • --replace-listen-pid — Replace listen PID if set for oci-runtime PID. swapping in the new one 🔄
  • --restore — Restore a container from a checkpoint. bringing it back from the dead, resurrection era 🧟✨
  • --runtime-arg — Additional arguments to pass to the runtime. Can be specified multiple times. extra args, stack 'em 📚
  • --runtime-opt — Additional options to pass to the restore or exec command. Can be specified multiple times. more options, more fun 🎈
  • -s, --systemd-cgroup — Enable systemd cgroup manager, rather than use the cgroupfs directly. letting systemd drive instead 🚗
  • --socket-dir-path — Location of container attach sockets. where the sockets hang out 🛋️
  • --sdnotify-socket — Path to the host's sd-notify socket to relay messages to. passing notes to the host 💌
  • --sync — Keep the main conmon process as its child by only forking once. one fork only, we're keeping it close 🍴
  • --syslog — Log to syslog (use with cgroupfs cgroup manager). old-school logging channel 📻
  • -t, --terminal — Allocate a pseudo-TTY. The default is false. When set to true, conmon will allocate a pseudo-tty and attach to the standard input of the container. This can be used, for example, to run a throwaway interactive shell. The default is false. (yes, the default is false — it said it twice, so it MEANS it) 🖥️
  • -T, --timeout — Kill container after specified timeout in seconds. the deadline, bestie ⏰
  • -u, --cuuid — Specify the Container UUID to use. its government name 🆔
  • --version — Print the version and exit. tell me who u are then dip 👋

🦋 SEE ALSO 🦋

podman(1), buildah(1), cri-o(1), crun(8), runc(8)

the whole squad, go say hi 💜

🌈 HISTORY 🌈

October 2020, Originally compiled by Dan Walsh dwalsh@redhat.com ⟨mailto:dwalsh@redhat.com⟩ — thank u Dan, icon behavior 🫶

and that's the whole page, bestie!! this lil slice of the System Manager's Manual is filed under User Commands for conmon(8) 💅✨ ily, go monitor some containers 🎀

📦 where this page comes from