Skip to main content

kernel_explainer/
well_known.rs

1// Well-known binary name → description (nginx, postgres, sshd, ...).
2//
3// This is intentionally small and opinionated; it can be extended over time via
4// PRs without affecting the core architecture.
5
6pub fn binary_description(name: &str) -> Option<&'static str> {
7    let lower = name.to_lowercase();
8    match lower.as_str() {
9        "nginx" => Some("Web server handling HTTP/HTTPS traffic"),
10        "httpd" | "apache2" => Some("Apache HTTP server"),
11        "postgres" | "postgresql" => Some("PostgreSQL database server"),
12        "mysqld" | "mariadbd" => Some("MySQL/MariaDB database server"),
13        "redis-server" | "redis" => Some("Redis in-memory data store"),
14        "sshd" => Some("SSH daemon accepting remote shell connections"),
15        "systemd" => Some("Init system and service manager (PID 1)"),
16        "dockerd" => Some("Docker container daemon"),
17        "containerd" => Some("Container runtime daemon (containerd)"),
18        "kubelet" => Some("Kubernetes node agent (kubelet)"),
19        "node" => Some("Node.js runtime process"),
20        "python" | "python3" => Some("Python interpreter process"),
21        "java" => Some("JVM process (Java application)"),
22        "rsyslogd" => Some("System logging daemon (rsyslog)"),
23        "journald" | "systemd-journald" => Some("systemd journal logging service"),
24        "sshd-session" => Some("Interactive SSH session"),
25        _ => None,
26    }
27}