10 ms·

Ctop – commandline monitoring for containers

323 points by vektorlab 10y ago

williamstein 10y ago
very cool!!
vladsanchez 10y ago
Much needed tool. Instant Love! Thanks.
moondev 10y ago
So awesome. Would be nice to hook this in to k8s in some way. I guess you could mount the socket and run it in a pod
brunoqc 10y ago
Isn't it recommended to not make Docker listen on the TCP port?
- dominotw 10y ago
  even if protected by tls?
  - zenlikethat 10y ago
    Not sure why you're getting down-voted, exposing the Docker API over a TCP socket using TLS is the only way to even hope to do it safely.
    - andrewguenther 10y ago
      Not exposing it over TCP at all is the only way to do it safely...
- andrewguenther 10y ago
  You should always use a UNIX socket if you don't need remote access.
  - noinsight 10y ago
    SSH supports forwarding UNIX sockets...
    - andrewguenther 10y ago
      Would not recommend
- raesene9 10y ago
  From reading the docs, it looks like ctop will connect to the local UNIX socket if there's no environment variable specifying a host, so you don't need to expose a TCP port to get this working.
- zenlikethat 10y ago
  Yes. Otherwise any process which can access the TCP port has full root access on the computer where Docker is installed. And root access to the entire Docker swarm cluster if swarm mode is enabled and the current node is acting as a manager. Whether or not giving root access to a system performance tool is wise is left as an exercise to the reader.
amaranth 10y ago
Forget containers, where can I get a commandline monitoring tool this slick for regular processes? I feel like we skipped a step here.
- dflock 10y ago
  http://hisham.hm/htop/ http://hisham.hm/htop/
  - amaranth 10y ago
    htop is nice, sure, but not ctop levels of nice. Aside from the general pretty display and having network details ctop also has a really nice looking expanded view[1] that shows these over time with graphs. [1] https://github.com/bcicen/ctop/blob/master/_docs/expanded.md https://github.com/bcicen/ctop/blob/master/_docs/expanded.md
    - 234dd57d2c8dba 10y ago
      I like glances
    - digi_owl 10y ago
      Dunno about pr process, but i could have sworn that graphs where a option in htop. http://hisham.hm/htop/index.php?page=screenshots http://hisham.hm/htop/index.php?page=screenshots Some of them show both 1.0 graphs and the new, unicode based ones from 2.0.
      - Normal_gaussian 10y ago
        Graphs are an option. Press F2, move to the entry you want and toggle it between Bar, Graph, Text, and LED. However they are still not per process. And there are no network statistics.
- chrisper 10y ago
  nmon is nice too
thejosh 10y ago
kind of like sysdig.
gkfasdfasdf 10y ago
Very cool...also, you can run on Docker For Windows using Docker itself: C:\ctop> type Dockerfile from buildpack-deps:jessie run curl -fsSL https://github.com/bcicen/ctop/releases/download/v0.4/ctop-0.4-linux-amd64 -o ctop && chmod +x ctop cmd ./ctop C:\ctop> docker build -t ctop . C:\ctop> docker run -it --rm -v /var/run/docker.sock:/var/run/docker.sock ctop
__jal 10y ago
Demonstrating once again that 99% of software development is reimplementation with another layer of indirection. (Not that I'm complaining; this is a needed tool.)
- digi_owl 10y ago
  And one that the world has basically been through once already. But the first time it happened in the insular world of corporate and university mainframes.
  - amorphid 10y ago
    When we start writing web browsers in WebAssembly, we shall have gone too far.
    - Spivak 10y ago
      I mean sure it's weird given the history but would it actually be that weird? If WA just becomes another VM like the JVM or LLVM that people can target it wouldn't surprise me to see someone port a web browser.
    - colordrops 10y ago
      WebAssembly is much better than JavaScript and XUL, which were/are both used to build browsers. Furthermore WebAssembly VMs are distinct entities from browsers. I know you were joking, but the joke shows old biases that should just go away.
    - ygjb 10y ago
      Given that webkit.js uses emscripten to build webkit for JS, and emscripten can target the wasm backend, ummm.. this is largely already done :) Obligatory reference: https://www.youtube.com/watch?v=9nazm3_OXac https://www.youtube.com/watch?v=9nazm3_OXac I think it is going to be very cool to see exactly how powerful and flexible this sort thing will become - how long til you demo a new tool by launching a linux container built on a webassembly vm that allows you to experiment with a new app with zero deploy effort.
deleted 10y ago
[deleted]
yo-code-sucks 10y ago
cgtop????
vzaliva 10y ago
Looks cool. I am trying to avoid manually installing software, especially on production machines. It makes it difficult to maintain and upgrade. Any plans for `apt` package?
- nerdponx 10y ago
  To be fair, it's a single binary. Couldn't you just "install" it in ~/bin?
- djsumdog 10y ago
  I tried `go get -u github.com/bcicen/ctop` since I prefer uses the source, but there appear to be some syntax errors in master. Guess I could have added the tag, but I just used the binary. You should check if `fpm` has support for making packages for go projects (It should. It supports Python and Ruby). Then it should be simply to create packages, sign them and put them on your company repo. I've worked at shops where we do this and even run update scripts to tell us when new versions are available and kick of the fpm build process.
  - icebraining 10y ago
    fpm can package anything, you can literally throw any old directory at it and get a .deb or .rpm out.
broodbucket 10y ago
Is there an equivalent for VMs that uses libvirt or something?
playa1 10y ago
This looks amazing! Too bad that the name collides with the Ubuntu package ctop which installs https://github.com/yadutaf/ctop https://github.com/yadutaf/ctop
- drakenot 10y ago
  Yea, I just ran into this by mistakenly attempting to 'apt-get install ctop'.
- nicolaslem 10y ago
  When I saw this post I was sure it was about yadutaf's project. The name collision is indeed unfortunate since the two projects basically do the same thing.
israrkhan 10y ago
"docker stats" give you same information, although I have to admit this one has better ui.
- djsumdog 10y ago
  TIL about docker stats. Hmm... it gives you the container hash instead of the name. Yea I agree, cgit is a much better interface.
  - theta_d 10y ago
    docker stats $(docker ps --format={{.Names}})
- nicwolff 10y ago
  You may have missed that you can ↓ to any container and ␍ to see a detailed perf graph https://github.com/bcicen/ctop/blob/master/_docs/expanded.md https://github.com/bcicen/ctop/blob/master/_docs/expanded.md
voldezar 10y ago
You can get same output with: docker stats $(docker ps --format={{.Names}})
deleted 10y ago
[deleted]
ah- 10y ago
Please someone port this to Kubernetes.
- vektorlab 10y ago
  No port necessary, an interface for connecting other container/cluster systems is already defined. Feel free to open a feature request (https://github.com/bcicen/ctop/issues https://github.com/bcicen/ctop/issues) for k8s to included as a connector in future releases.
zurn 10y ago
Didn't we have this already? https://linuxcontainers.org/lxc/manpages/man1/lxc-top.1.html https://linuxcontainers.org/lxc/manpages/man1/lxc-top.1.html
lirantal 10y ago
Really cool. I also wrote a similar tool - Dockly, which provides a more complete management of docker containers through the CLI. https://github.com/lirantal/dockly https://github.com/lirantal/dockly

323 points by vektorlab 10y ago

williamstein 10y ago

very cool!!

vladsanchez 10y ago

Much needed tool. Instant Love! Thanks.

moondev 10y ago

So awesome. Would be nice to hook this in to k8s in some way. I guess you could mount the socket and run it in a pod

brunoqc 10y ago

Isn't it recommended to not make Docker listen on the TCP port?

dominotw 10y ago
even if protected by tls?
- zenlikethat 10y ago
  Not sure why you're getting down-voted, exposing the Docker API over a TCP socket using TLS is the only way to even hope to do it safely.
  - andrewguenther 10y ago
    Not exposing it over TCP at all is the only way to do it safely...
andrewguenther 10y ago
You should always use a UNIX socket if you don't need remote access.
- noinsight 10y ago
  SSH supports forwarding UNIX sockets...
  - andrewguenther 10y ago
    Would not recommend
raesene9 10y ago
From reading the docs, it looks like ctop will connect to the local UNIX socket if there's no environment variable specifying a host, so you don't need to expose a TCP port to get this working.
zenlikethat 10y ago
Yes. Otherwise any process which can access the TCP port has full root access on the computer where Docker is installed. And root access to the entire Docker swarm cluster if swarm mode is enabled and the current node is acting as a manager. Whether or not giving root access to a system performance tool is wise is left as an exercise to the reader.

amaranth 10y ago

Forget containers, where can I get a commandline monitoring tool this slick for regular processes? I feel like we skipped a step here.

dflock 10y ago
http://hisham.hm/htop/ http://hisham.hm/htop/
- amaranth 10y ago
  htop is nice, sure, but not ctop levels of nice. Aside from the general pretty display and having network details ctop also has a really nice looking expanded view[1] that shows these over time with graphs. [1] https://github.com/bcicen/ctop/blob/master/_docs/expanded.md https://github.com/bcicen/ctop/blob/master/_docs/expanded.md
  - 234dd57d2c8dba 10y ago
    I like glances
  - digi_owl 10y ago
    Dunno about pr process, but i could have sworn that graphs where a option in htop. http://hisham.hm/htop/index.php?page=screenshots http://hisham.hm/htop/index.php?page=screenshots Some of them show both 1.0 graphs and the new, unicode based ones from 2.0.
    - Normal_gaussian 10y ago
      Graphs are an option. Press F2, move to the entry you want and toggle it between Bar, Graph, Text, and LED. However they are still not per process. And there are no network statistics.
chrisper 10y ago
nmon is nice too

thejosh 10y ago

kind of like sysdig.

gkfasdfasdf 10y ago

Very cool...also, you can run on Docker For Windows using Docker itself: C:\ctop> type Dockerfile from buildpack-deps:jessie run curl -fsSL https://github.com/bcicen/ctop/releases/download/v0.4/ctop-0.4-linux-amd64 -o ctop && chmod +x ctop cmd ./ctop C:\ctop> docker build -t ctop . C:\ctop> docker run -it --rm -v /var/run/docker.sock:/var/run/docker.sock ctop

__jal 10y ago

Demonstrating once again that 99% of software development is reimplementation with another layer of indirection. (Not that I'm complaining; this is a needed tool.)

digi_owl 10y ago
And one that the world has basically been through once already. But the first time it happened in the insular world of corporate and university mainframes.
- amorphid 10y ago
  When we start writing web browsers in WebAssembly, we shall have gone too far.
  - Spivak 10y ago
    I mean sure it's weird given the history but would it actually be that weird? If WA just becomes another VM like the JVM or LLVM that people can target it wouldn't surprise me to see someone port a web browser.
  - colordrops 10y ago
    WebAssembly is much better than JavaScript and XUL, which were/are both used to build browsers. Furthermore WebAssembly VMs are distinct entities from browsers. I know you were joking, but the joke shows old biases that should just go away.
  - ygjb 10y ago
    Given that webkit.js uses emscripten to build webkit for JS, and emscripten can target the wasm backend, ummm.. this is largely already done :) Obligatory reference: https://www.youtube.com/watch?v=9nazm3_OXac https://www.youtube.com/watch?v=9nazm3_OXac I think it is going to be very cool to see exactly how powerful and flexible this sort thing will become - how long til you demo a new tool by launching a linux container built on a webassembly vm that allows you to experiment with a new app with zero deploy effort.

deleted 10y ago

[deleted]

yo-code-sucks 10y ago

cgtop????

vzaliva 10y ago

Looks cool. I am trying to avoid manually installing software, especially on production machines. It makes it difficult to maintain and upgrade. Any plans for `apt` package?

nerdponx 10y ago
To be fair, it's a single binary. Couldn't you just "install" it in ~/bin?
djsumdog 10y ago
I tried `go get -u github.com/bcicen/ctop` since I prefer uses the source, but there appear to be some syntax errors in master. Guess I could have added the tag, but I just used the binary. You should check if `fpm` has support for making packages for go projects (It should. It supports Python and Ruby). Then it should be simply to create packages, sign them and put them on your company repo. I've worked at shops where we do this and even run update scripts to tell us when new versions are available and kick of the fpm build process.
- icebraining 10y ago
  fpm can package anything, you can literally throw any old directory at it and get a .deb or .rpm out.

broodbucket 10y ago

Is there an equivalent for VMs that uses libvirt or something?

playa1 10y ago

This looks amazing! Too bad that the name collides with the Ubuntu package ctop which installs https://github.com/yadutaf/ctop https://github.com/yadutaf/ctop

drakenot 10y ago
Yea, I just ran into this by mistakenly attempting to 'apt-get install ctop'.
nicolaslem 10y ago
When I saw this post I was sure it was about yadutaf's project. The name collision is indeed unfortunate since the two projects basically do the same thing.

israrkhan 10y ago

"docker stats" give you same information, although I have to admit this one has better ui.

djsumdog 10y ago
TIL about docker stats. Hmm... it gives you the container hash instead of the name. Yea I agree, cgit is a much better interface.
- theta_d 10y ago
  docker stats $(docker ps --format={{.Names}})
nicwolff 10y ago
You may have missed that you can ↓ to any container and ␍ to see a detailed perf graph https://github.com/bcicen/ctop/blob/master/_docs/expanded.md https://github.com/bcicen/ctop/blob/master/_docs/expanded.md

voldezar 10y ago

You can get same output with: docker stats $(docker ps --format={{.Names}})

deleted 10y ago

[deleted]

ah- 10y ago

Please someone port this to Kubernetes.

vektorlab 10y ago
No port necessary, an interface for connecting other container/cluster systems is already defined. Feel free to open a feature request (https://github.com/bcicen/ctop/issues https://github.com/bcicen/ctop/issues) for k8s to included as a connector in future releases.

zurn 10y ago

Didn't we have this already? https://linuxcontainers.org/lxc/manpages/man1/lxc-top.1.html https://linuxcontainers.org/lxc/manpages/man1/lxc-top.1.html

lirantal 10y ago

Really cool. I also wrote a similar tool - Dockly, which provides a more complete management of docker containers through the CLI. https://github.com/lirantal/dockly https://github.com/lirantal/dockly