How to Install Sysdig on Ubuntu 22.04 LTS

Sysdig is open source, system-level exploration: capture system state and activity from a running Linux-based system such as Ubuntu 22.04, then save, filter, and analyze that is particularly useful for system analysis, inspection, and debugging, amongst other uses. Sysdig is scriptable in Lua and includes a command-line interface and a powerful interactive UI using the command csysdig that runs in your terminal.

In the following tutorial, you will learn how to install Sysdig on Ubuntu 22.04 LTS Jammy Jellyfish using the command line terminal and basic commands for using Sysdig.

Update Ubuntu

First, before anything, update your system to ensure all existing packages are up to date.

sudo apt update && sudo apt upgrade -y

Install Required Packages

To complete the installation, you will need to install the following software packages using the following command in your terminal.

sudo apt install software-properties-common apt-transport-https wget ca-certificates dkms gnupg2 ncurses-term -y

Import Sysdig Repository

By default, Sysdig is not available on Ubuntu’s repository; luckily, a repository exists from the developer.

First, import the GPG key using the following command.

sudo wget -O- | gpg --dearmor | sudo tee /usr/share/keyrings/sysdig.gpg

Next, import the repository.

echo 'deb [signed-by=/usr/share/keyrings/sysdig.gpg] stable-$(ARCH)/' | sudo tee /etc/apt/sources.list.d/sysdig.list

Note the $(ARCH) will match any supported architectures that Sysdig currently supports.

Lastly, run an APT update.

sudo apt update

Install Sysdig

With the repository now imported, run the following command to install Sysdig.

sudo apt install linux-headers-$(uname -r) sysdig -y

The overall process should not take longer than a few minutes at most.

Once installed, confirm the version and build of Sysdig by using the following.

sysdig --version

Sysdig Commands

Now that you have installed Sysdig, you can use the monitoring software, which will be done with the csysdig command. A word of note, you need to run sysdig as root because it requires access to critical areas such as /proc file system, /dev/sysdig* devices and needs to auto-load the sysdig-probe kernel module.

First, bring up the display using the following command.

sudo csysdig

You will see the following screen below.


How to Install Sysdig on Ubuntu 22.04 LTS

If you have trouble opening Sysdig, check the troubleshooting at the bottom of the tutorial.

Next, you can press the F2 button to change the view for future reference.


How to Install Sysdig on Ubuntu 22.04 LTS

In the menu view above, you can use your arrow keys to move around to select an option you would like to monitor. For example, if you want to see the Processes CPU, scroll down and hit the ENTER key, displaying the following.

Example of Process Cpu Stats:

How to Install Sysdig on Ubuntu 22.04 LTS

To return to the previous menu selection, use the F2 button key. From here, you can select quite an extensive list. Alternatively, you can use the terminal line commands. Some examples of these commands are shown below.

Run the following command to see the top processes ranked by CPU utilization percentage.

sudo sysdig -c topprocs_cpu

Example output:

How to Install Sysdig on Ubuntu 22.04 LTS

Run the following command to see the system’s network connections.

sudo sysdig -c netstat

Example output:

How to Install Sysdig on Ubuntu 22.04 LTS

To see a list of system processes.

sudo sysdig -c ps

Example output:

How to Install Sysdig on Ubuntu 22.04 LTS


If you encounter the following problem when trying to use the csysdig for the first time (Error opening terminal: xterm-256color). This can be solved most times by installing the next package.

sudo apt install ncurses-term

How to Update/Upgrade Sysdig

Since you have imported the official APT repository, updating Sysdig is quick and straightforward; run the following standard APT commands as you would updating any other system package.

sudo apt update && sudo apt upgrade

How to Remove (Uninstall) Sysdig

When you no longer require Sysdig installed on your system, use the following command to remove it.

sudo apt autoremove sysdig --purge -y

Next, remove the GPG key.

sudo rm /usr/share/keyrings/sysdig.gpg

Lastly, remove the repository.

sudo rm /etc/apt/sources.list.d/sysdig.list

Comments and Conclusion

Overall, Sysdig combined the functionality of several existing command-line tools and integrated them into one single application with an excellent GUI or uses traditional terminal commands to monitor nearly any part of your Linux system.


Like to get automatic updates? Follow us on one of our social media accounts!