Linux Installation

One-liner

curl -fsSL https://get.monsys.ai/install.sh | sudo MONSYS_TOKEN=ms_… bash

The installer:

1. detects architecture (x64/arm64) and distro;
2. downloads the binary in /usr/local/bin/monsys-agent;
3. sets up /etc/monsys/agent.toml with your token (mode 0640, root:monsys);
4. plants honeypot canaries via monsys-agent --setup-honeypots;
5. installs sudoers rules (scope-locked);
6. installs and enables monsys-agent.service (systemd).

Required capabilities

CapabilityBoundingSet=CAP_NET_ADMIN CAP_SYS_PTRACE — for iptables emergency actions and process fingerprinting.

Resource budget

Limit	Goal
RSS	≤ 60 MB under normal load
CPU	< 1% idle, ~3% during collection
Disk	<1 MB/s during batch flush

Verify

systemctl status monsys-agent
journalctl -u monsys-agent -f