/usr/bin/conmon

Usage:
  conmon [OPTION…] - conmon utility

Help Options:
  -h, --help                         Show help options

Application Options:
  --api-version                      Conmon API version to use
  -b, --bundle                       Location of the OCI Bundle path
  -c, --cid                          Identification of Container
  -P, --conmon-pidfile               PID file for the conmon process
  -p, --container-pidfile            PID file for the initial pid inside of container
  -u, --cuuid                        Container UUID
  -e, --exec                         Exec a command into a running container
  --exec-attach                      Attach to an exec session
  --exec-process-spec                Path to the process spec for execution
  --exit-command                     Path to the program to execute when the container terminates its execution
  --exit-command-arg                 Additional arg to pass to the exit command.  Can be specified multiple times
  --exit-delay                       Delay before invoking the exit command (in seconds)
  --exit-dir                         Path to the directory where exit files are written
  --leave-stdin-open                 Leave stdin open when attached client disconnects
  --log-level                        Print debug logs based on log level
  -l, --log-path                     Log file path
  --log-size-max                     Maximum size of log file
  --log-global-size-max              Maximum size of all log files
  --log-tag                          Additional tag to use for logging
  --log-label                        Additional label to include in logs. Can be specified multiple times
  --no-container-partial-message     Do not set CONTAINER_PARTIAL_MESSAGE=true for partial lines in journald logs (journald driver only)
  -n, --name                         Container name
  --no-new-keyring                   Do not create a new session keyring for the container
  --no-pivot                         Do not use pivot_root
  --no-sync-log                      Do not manually call sync on logs after container shutdown
  -0, --persist-dir                  Persistent directory for a container that can be used for storing container data
  --replace-listen-pid               Replace listen pid if set for oci-runtime pid
  --restore                          Restore a container from a checkpoint
  -r, --runtime                      Path to store runtime data for the container
  --runtime-arg                      Additional arg to pass to the runtime. Can be specified multiple times
  --runtime-opt                      Additional opts to pass to the restore or exec command. Can be specified multiple times
  --sdnotify-socket                  Path to the host's sd-notify socket to relay messages to
  --socket-dir-path                  Location of container attach sockets
  -i, --stdin                        Open up a pipe to pass stdin to the container
  --sync                             Keep the main conmon process as its child by only forking once
  --syslog                           Log to syslog (use with cgroupfs cgroup manager)
  -s, --systemd-cgroup               Enable systemd cgroup manager, rather then use the cgroupfs directly
  -t, --terminal                     Allocate a pseudo-TTY. The default is false
  -T, --timeout                      Kill container after specified timeout in seconds.
  --version                          Print the version and exit
  --full-attach                      Don't truncate the path to the attach socket. This option causes conmon to ignore --socket-dir-path
  --seccomp-notify-socket            Path to the socket where the seccomp notification fd is received
  --seccomp-notify-plugins           Plugins to use for managing the seccomp notifications
  --log-rotate                       Enable log rotation instead of truncation when log-size-max is reached
  --log-max-files                    Number of backup log files to keep (default: 1)
  --log-allowlist-dir                Allowed log directory