chkrootkit on an Anubiz Offshore VPS
chkrootkit is the second classic rootkit scanner alongside rkhunter. It checks for hidden processes and modified binaries with a smaller ruleset that runs faster and produces less noise. Running both on an Anubiz VPS gives you complementary coverage. This guide is the chkrootkit setup with daily cron and email summary.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Step 1: Install
apt install chkrootkit.
Step 2: First Run
chkrootkit | tee /tmp/first-scan. Save baseline. Any future change to known-good list deserves a look.
Step 3: Cron
Package installs /etc/cron.daily/chkrootkit. RUN_DAILY=yes and RUN_DAILY_OPTS in /etc/chkrootkit.conf.
Step 4: Mail Diff Only
The default cron only emails on diff vs previous run. So you get noise only when something actually changes.
Step 5: Coverage Notes
chkrootkit checks for ~70 known rootkits. Modern attackers use custom tooling so this is a tripwire not a guarantee.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.