core

package
v0.20.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 21, 2026 License: Apache-2.0 Imports: 18 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CollectFirmwareBoot

func CollectFirmwareBoot(ctx context.Context) *payload.FirmwareBoot

CollectFirmwareBoot detects UEFI vs BIOS hints (no root required for sysfs).

func CollectFqdn

func CollectFqdn(ctx context.Context, shortHostname string) string

CollectFqdn derives a UI FQDN: dotted /etc/hostname if present, then hostname -f, -A, and shortHostname + hostname -d (GNU) when a DNS domain suffix is available.

func CollectGrubSnapshot

func CollectGrubSnapshot(ctx context.Context) *payload.GrubSnapshot

CollectGrubSnapshot parses /etc/default/grub and optionally peeks grub.cfg (no secrets).

func CollectHighRiskProcessSurface

func CollectHighRiskProcessSurface(ctx context.Context) *payload.HighRiskProcessSurface

CollectHighRiskProcessSurface samples TCP listeners and root-owned processes with exe/cmdline hints.

func CollectHostProcess

func CollectHostProcess(ctx context.Context) *payload.HostProcess

CollectHostProcess builds top CPU/RSS merge and interpreter / heuristic signals (M1).

func CollectKernelModules

func CollectKernelModules(ctx context.Context) *payload.KernelModulesBlock

CollectKernelModules lists loaded modules from /proc/modules (capped) with denylist hits.

func CollectOSInfo

func CollectOSInfo(ctx context.Context) (payload.OSInfo, string)

CollectOSInfo sends pretty/kernel, raw /etc/os-release fields, and gopsutil host.Info. The API derives distro_id / distro_version_id / distro_name for EOL (see backend src/ingest/os_normalize). The second return is the host name from host.Info (for dashboard titles), or "" if unavailable.

func CollectSelinuxApparmor

func CollectSelinuxApparmor(ctx context.Context) *payload.SelinuxApparmorBlock

CollectSelinuxApparmor reports SELinux mode and a short AppArmor summary when available.

func CollectSysctlLiveProfile

func CollectSysctlLiveProfile(ctx context.Context) *payload.SysctlLiveBlock

CollectSysctlLiveProfile reads allowlisted /proc/sys keys (bounded).

func CollectSysctlOverlay

func CollectSysctlOverlay(ctx context.Context) *payload.SysctlOverlayBlock

CollectSysctlOverlay parses sysctl.conf and sysctl.d, compares to live values for drift.

func CollectSystemdHealth

func CollectSystemdHealth(ctx context.Context) *payload.SystemdHealth

CollectSystemdHealth reports systemd default target and running state when systemctl exists.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL