[savvyadmin] 0:home1:processes2:recipes3:explain4:archive linux & server reference since 2007

david@web-1:~$ ls process/

total 8 · one card = one process: what it is, why it is busy, diagnose, fix, safe to kill? · machine-readable: index.json ── Kernel threads & system daemons ──
NAMEKINDSAFE TO KILL?WHAT IT IS
kswapd0 kernel-thread NO Kernel thread that reclaims memory in the background when a zone's free pages fall below the low watermark; one per NUMA node, kswapd0 is node 0.
systemd-journald system-daemon The systemd journal daemon: collects kernel, service and syslog messages into binary journal files under /run/log/journal (volatile) or /var/log/journal (persistent), rate-limits chatty services and enforces disk caps.
unattended-upgrades system-daemon NO Ubuntu's automatic security updates: a daily systemd timer refreshes the package lists and runs unattended-upgrade, which installs packages from the allowed origins (the security pockets by default) and can reboot the machine if you let it.
── AI agents ──
NAMEKINDSAFE TO KILL?WHAT IT IS
claude ai-agent YES Claude Code command-line agent: reads, edits and runs commands in a project directory with the permissions of the user who started it, filtered by the session's permission mode.
codex ai-agent YES OpenAI's Codex CLI agent: a native binary that edits files and runs commands in your repository under two settings, the sandbox mode that the operating system enforces and the approval policy that decides when it asks you.
gemini ai-agent YES Google's Gemini CLI agent: a Node.js process that reads, edits and runs commands in the current project with your user's permissions, approving tools by its approval mode.
ollama ai-agent Local LLM server: ollama serve loads models on demand and answers an unauthenticated HTTP API on 127.0.0.1:11434 by default; whoever can reach that port can run models, and read or feed them anything.
openclaw-gateway ai-agent The OpenClaw Gateway: a Node.js daemon that serves the Control UI, the WebSocket and HTTP API (/v1/*, /tools/invoke, /api/channels/*) on one port, 18789 by default, and runs the agent's tools, terminal and browser control behind it.