config

var Global struct {
	// RunDir is the path to the runtime state directory for Capsule8
	RunDir string `split_words:"true" default:"/var/run/capsule8"`

	// HTTP address and port for the pprof runtime profiling endpoint.
	ProfilingAddr string `split_words:"true"`
}

var Sensor struct {
	// Node name to use if not the value returned from uname(2)
	NodeName string

	// DockerContainerDir is the path to the directory used for docker
	// container local storage areas (i.e. /var/lib/docker/containers)
	DockerContainerDir string `split_words:"true" default:"/var/lib/docker/containers"`

	// OciContainerDir is the path to the directory used for the
	// container runtime's container state directories
	// (i.e. /var/run/docker/libcontainerd)
	OciContainerDir string `split_words:"true" default:"/var/run/docker/libcontainerd"`

	// Subscription timeout in seconds
	SubscriptionTimeout int64 `default:"5"`

	// Sensor gRPC API Server listen address may be specified as any of:
	//   unix:/path/to/socket
	//   127.0.0.1:8484
	//   :8484
	ServerAddr string `split_words:"true" default:"unix:/var/run/capsule8/sensor.sock"`

	// Names of cgroups to monitor for events. Each cgroup specified must
	// exist within the perf_event cgroup hierarchy. For example, if this
	// is set to "docker", the Sensor will monitor containers for events
	// and ignore processes not running in Docker containers. To monitor
	// the entire system, use "" or "/" as the cgroup name.
	CgroupName []string `split_words:"true"`

	// Ignore missing debugfs/tracefs mount (useful for automated testing)
	DontMountTracing bool `split_words:"true"`

	// Ignore missing perf_event cgroup filesystem mount
	DontMountPerfEvent bool `split_words:"true"`

	// The default size of ring buffers used for kernel perf_event
	// monitors. The size is defined in units of pages.
	RingBufferPages int `split_words:"true" default:"8"`

	// The default buffer length for Go channels used internally
	ChannelBufferLength int `split_words:"true" default:"1024"`
}