Leanmachine

Leanmachine is a codebase for writing small, memory-preallocating daemons which grab realtime priority on a Linux system and provide services during emergency system states.

The initial implementation acts as the codebase for 'leanadmin2.c', a swiss-army-knife systems administration program providing basic process and system control, even under heavy swapping and/or CPU utilization.

It secures its runtime through the use of sched_setscheduler(0, SCHED_FIFO, 50); and mlockall(); to lock all its pages into RAM so they cannot be swapped. The production-ready version of the app will be statically compiled as well, ensuring that no swapping of shared libraries will impact its runtime.

My initial prospect is to develop leanadmin2 into a somewhat-reasonably secure application which can be used all the time, or temporarily, on any system which has a secure private interface for the sysadmin to connect. (Note: it's probably best that leanadmin2 not listen on an interface which depends on userspace processes; eg a PPP link)

In addition, after leanadmin2 has become a fairly stable and usable application, I will work on a second implementation based on leanmachine.c -- netsysrq. I intend to provide functionality vaguely similar to the Magic SysRQ feature in Linux over a network link.

As the program gains security and features, I will update this website to provide more information, along with download links and documentation.