Announcing Sysdig 0.1.98

Bug Fixes

New and updated features

Container support: sysdig now supports Docker, LXC and libvirt-lxc containers, with several sub-features described below and in the documentation
supports to an alternate /proc file system tree (useful in containers) by setting the environment variable SYSDIG_HOST_ROOT
supports parsing network connections from /proc from a network namespace different than the global one
container information is available in the chisel API (thread table)
-pc and -pcontainer will use a container-friendly output format for events
Automated Docker builds for running sysdig:https://registry.hub.docker.com/u/sysdig/sysdig/
sysdig-probe-loader: new script included with sysdig to facilitate loading the sysdig-probemodule in atypic environments such as containers
build-sysdig-probe-binaries: new script to prebuild sysdig-probe binaries for a specific set of kernel configurations (currently CoreOS) and upload them to S3 so that they can be downloaded at runtime on environments that don’t ship kernel headers

New and updated chisels

New and updated filter fields

thread.cgroups: all the cgroups the thread belongs to, aggregated into a single string.
thread.cgroup: the cgroup the thread belongs to, for a specific subsystem. E.g.thread.cgroup.cpuacct.
thread.vtid: the id of the thread generating the event as seen from its current PID namespace.
proc.vpid: the id of the process generating the event as seen from its current PID namespace.
container.id: the container id.
container.name: the container name.
container.image: the container image.