Docker container processes.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: docker_container_processes

  • Linux
  • Mac OSX

Table schema

Name Type Description
id TEXT Container ID
pid BIGINT Process ID
name TEXT The process path or shorthand argv[0]
cmdline TEXT Complete argv
state TEXT Process state
uid BIGINT User ID
gid BIGINT Group ID
euid BIGINT Effective user ID
egid BIGINT Effective group ID
suid BIGINT Saved user ID
sgid BIGINT Saved group ID
wired_size BIGINT Bytes of unpagable memory used by process
resident_size BIGINT Bytes of private memory used by process
total_size BIGINT Total virtual memory size
start_time BIGINT Process start in seconds since boot (non-sleeping)
parent BIGINT Process parent’s PID
pgroup BIGINT Process group
threads INTEGER Number of threads used by process
nice INTEGER Process nice level (-20 to 20, default 0)
user TEXT User name
time TEXT Cumulative CPU time. [DD-]HH:MM:SS format
cpu DOUBLE CPU utilization as percentage
mem DOUBLE Memory utilization as percentage

Query examples

select * from docker_container_processes where id = '1234567890abcdef'
select * from docker_container_processes where id = '11b2399e1426d906e62a0c357650e363426d6c56dbe2f35cbaa9b452250e3355'