Skip to content

debug-tools

Version 2026.144.1443
Repo superproject

In-container debug toolkit — network, process, file, and system-stats probes for inspecting deployed services from the inside Installs a distro-agnostic debugging toolkit so an operator can inspect a deployed service from inside the container without re-deploying. Network probes (ip/ss/lsof/ping/dig/nc/socat/tcpdump/ traceroute/mtr/wget), process inspection (ps/top/htop/pgrep/free/ vmstat/strace/ltrace), file/text inspection (file/tree/xxd/vim/nano), system stats (iotop/iftop/sysstat), and session helpers (tmux/rsync). Every headline binary lands at a fixed path, so its presence is directly verifiable. rpm/deb/pac sections cover Fedora/Debian/Ubuntu/Arch.

This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.

Intent Step
check the DNS lookup tool dig is present for probing service discovery
check the socket-statistics tool ss is present for inspecting listening ports
check tcpdump is present for capturing traffic between services
check the process-table tool ps is available to list running processes
check the interactive process monitor htop is available
check the syscall tracer strace is available to debug a stuck process
check an editor (vim) is present so config files can be inspected in place
check tmux is present so a long-running probe survives a dropped exec session
check lsof is present to report which process holds an open file or socket
check command=command -v ping
check command=command -v nc
check file=/usr/bin/nano
check file=/usr/bin/tree
check file=/usr/bin/wget
check file=/usr/bin/file
check file=/usr/bin/rsync
check package=procps-ng
check package=htop
check package=strace
check package=tcpdump
check package=tmux
check package=lsof