GoKawiilNew open-source tool Corral guarantees full cleanup of agent-spawned processes
A developer released Corral, a Linux command-line tool that runs a shell command with a time limit and ensures every process it spawned, including detached daemons, is terminated before returning. It uses cgroup v2's cgroup.kill for guaranteed cleanup when available, or acts as a child subreaper tracking processes via /proc and pidfds otherwise, and exits with code 120 if it cannot verify a clean kill. The tool requires Linux 5.11 or later, with 5.14 needed for its enforced cgroup mode, and is not intended as a security sandbox.
GoKawiil's interpretation of the reporting above, not reported fact.
AI coding agents and CI systems increasingly execute arbitrary shell commands they didn't author, and standard process management often fails to catch forked daemons or background processes holding open file descriptors, leaving orphaned processes that consume ports, locks, and CPU. A verifiable kill mechanism like Corral's could reduce flaky CI runs and resource leaks in automated pipelines, though its reliance on newer Linux kernel features and glibc versions may limit adoption on older systems.
- Corral ensures no child or orphaned process survives after a command's time limit expires, verifying this before returning control.
- It uses cgroup v2's cgroup.kill for full process-tree termination when supported, falling back to subreaper-based tracking via /proc and pidfds otherwise.
- The tool requires Linux 5.11+ (5.14+ for enforced mode) and is explicitly not a security sandbox, offering no restrictions on file or network access.
Source: github.com, 2026-09-29
Published there as: “Show HN: Corral – Kill every command your agent starts”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.