Linux Installation
One-liner
curl -fsSL https://get.monsys.ai/install.sh | sudo MONSYS_TOKEN=ms_… bashThe installer:
- detects architecture (x64/arm64) and distro;
- downloads the binary in
/usr/local/bin/monsys-agent; - sets up
/etc/monsys/agent.tomlwith your token (mode 0640, root:monsys); - plants honeypot canaries via
monsys-agent --setup-honeypots; - installs sudoers rules (scope-locked);
- installs and enables
monsys-agent.service(systemd).
Required capabilities
CapabilityBoundingSet=CAP_NET_ADMIN CAP_SYS_PTRACE — for iptables emergency actions and process fingerprinting.
Resource budget
| Limit | Goal |
|---|---|
| RSS | ≤ 60 MB under normal load |
| CPU | < 1% idle, ~3% during collection |
| Disk | <1 MB/s during batch flush |
Verify
systemctl status monsys-agentjournalctl -u monsys-agent -fI followed the rules to preserve the YAML frontmatter structure, markdown formatting, and technical terms.