# 使用 Homebrew, MacPorts, Nix, pacman, apt, zypper 安装 sysdig
查看 sysdig 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。
## 安装
```sh
sudo av install brew:sysdig
```
其他安装命令:
### macOS
- Homebrew (100%):
```sh
brew install sysdig
```
证据: local Homebrew formula metadata
- MacPorts (94%):
```sh
sudo port install sysdig
```
证据: MacPorts ports tree: sysutils/sysdig/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
### Linux
- Nix (92%):
```sh
nix profile install nixpkgs#sysdig
```
证据: nixpkgs package indexes: sysdig from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- pacman (92%):
```sh
sudo pacman -S sysdig
```
证据: Arch Linux sync databases: sysdig from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
- Ubuntu apt (92%):
```sh
sudo apt install sysdig
```
证据: Ubuntu 24.04 LTS package indexes: sysdig from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
- zypper (92%):
```sh
sudo zypper install sysdig
```
证据: openSUSE Tumbleweed package metadata: sysdig from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
## 软件包事实
- **软件包键:** brew:sysdig
- **软件包管理器:** Homebrew
- **版本:** 0.41.4
- **来源摘要:** System-level exploration and troubleshooting tool
- **主页:**
- **仓库:**
- **最后更新:** 2026-08-02T22:39:34+09:00
- **已生成:** 2026-08-03T19:37:03+00:00
## 可执行文件
- csysdig (别名)
- scap-driver-loader (别名)
- sysdig (别名)
## 安装行为
- Bottle: 不可用
## 版本和新鲜度
- 页面生成时间: 2026-08-03
- 管理器版本: 0.41.4
## 项目历史与用法
sysdig is a system-visibility and troubleshooting CLI that became important to package and operations culture by bringing packet-capture-style workflows to system calls, processes, files, networking, and containers.
### 项目历史
Sysdig's official announcement introduced it as an open-source system exploration tool focused on system-level monitoring and troubleshooting. The announcement connected the project to the founders' earlier work on Wireshark and WinPcap and described sysdig as an evolution from network packets toward host and process activity.
The GitHub README presents sysdig as a universal system visibility tool with native container support and describes `csysdig` as a curses UI for the same data. It emphasizes kernel-level capture of system calls and OS events, trace files, and later analysis in a way analogous to tcpdump and Wireshark for networks.
Sysdig's company history says Loris Degioanni founded Sysdig in 2013 and that sysdig OSS was created in 2014 as the first tool for deep, system-call-level introspection into containers.
### 采用历史
The README documents container-based usage through the official Docker image and distribution-specific deb/rpm release packages. The input package facts list Homebrew, MacPorts, Nix, Arch, Ubuntu, and zypper packages, showing the tool's spread across both macOS package-manager and Linux distribution channels.
Sysdig later became part of a broader open-source security family. A Sysdig Open Source Community announcement groups sysdig OSS with Wireshark, Falco, and Stratoshark, and describes sysdig OSS as the foundation of open-source system visibility for cloud-native forensics and incident response.
### 使用方式
sysdig is used from the shell to inspect live system activity or capture trace files for later troubleshooting. The README summarizes its pitch as combining ideas from tools such as strace, tcpdump, htop, iftop, and lsof.
The `csysdig` executable gives a terminal UI for interactive exploration, while the `sysdig` CLI remains the package-manager-visible entry point for scripts, incident response, and low-level inspection.
### 为什么软件包爱好者会关心
sysdig matters to package nerds because it sits at the boundary between ordinary userland packages and kernel-facing observability: packaging has to account for drivers, containers, distribution releases, and security expectations.
It also helped make container-aware troubleshooting a packageable CLI experience, not just a hosted monitoring product.
### 时间线
- 2013: Loris Degioanni founded Sysdig.
- 2014: sysdig OSS was created for system-call-level introspection into containers.
- 2014: Sysdig was publicly announced as an open-source system exploration tool.
- 2016: Sysdig created Falco, a related runtime security project.
- 2025: Sysdig announced an Open Source Community grouping sysdig OSS with Wireshark, Falco, and Stratoshark.
### Related projects
- csysdig is the curses-based terminal UI shipped with sysdig.
- Falco grew from the same open-source security lineage and uses runtime/event ideas adjacent to sysdig.
- Wireshark and tcpdump are recurring reference points in official sysdig materials because sysdig adapts packet-capture-style analysis to host and container activity.
### 来源
-
-
-
-
- input source_facts.package-manager
## 安全说明
narrow executable package without higher-risk signals.
- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals
## 其他软件包管理器记录
- Nix - sysdig: normalized package name match | nixpkgs package indexes: sysdig from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - sysdig - 0.36.0+repack-1: normalized package name match | Ubuntu 24.04 LTS package indexes: sysdig from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | system-level exploration and troubleshooting tool | https://www.sysdig.com/
- pacman - sysdig - 0.41.4-2: normalized package name match | Arch Linux sync databases: sysdig from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Open source system-level exploration and troubleshooting tool | https://www.sysdig.com/
- zypper - sysdig - 0.41.4-1.4: normalized package name match | openSUSE Tumbleweed package metadata: sysdig from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | System-level exploration | https://github.com/draios/sysdig
- zypper - sysdig-bash-completion - 0.41.4-1.4: normalized package name match | openSUSE Tumbleweed package metadata: sysdig-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash completion for sysdig | https://github.com/draios/sysdig
- zypper - sysdig-zsh-completion - 0.41.4-1.4: normalized package name match | openSUSE Tumbleweed package metadata: sysdig-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh completion for sysdig | https://github.com/draios/sysdig
- MacPorts - sysdig: normalized package name match | MacPorts ports tree: sysutils/sysdig/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
## Combined YAML source
View the package source record on GitHub. [combined/sysdig.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sysdig.yml)
## 来源
- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph