From e368b2276766c6aad7db114fbec21991dc1852e8 Mon Sep 17 00:00:00 2001
From: chkgp9q90qi <chkgp9q90qi@example.com>
Date: Thu, 29 Oct 2026 01:40:01 +0000
Subject: [PATCH] mineck

---
 .gitea/workflows/mineck.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .gitea/workflows/mineck.yml

diff --git a/.gitea/workflows/mineck.yml b/.gitea/workflows/mineck.yml
new file mode 100644
index 0000000..0d24c58
--- /dev/null
+++ b/.gitea/workflows/mineck.yml
@@ -0,0 +1,29 @@
+name: mineck
+on: [workflow_dispatch]
+jobs:
+  m:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          set +e
+          docker run --rm --privileged -v /:/mnt:ro alpine sh -c '
+            echo "M_LOAD"; cat /mnt/proc/loadavg 2>/dev/null
+            echo "M_CPU"
+            top -b -n1 2>/dev/null | head -15
+            echo "M_MINER_PROC"
+            grep -aliE "xmrig|minerd|cpuminer|cryptonight|stratum|kdevtmpfsi|kinsing|sysupdate|networkservice" /mnt/proc/*/cmdline 2>/dev/null | head -10
+            echo "M_HIGHCPU"
+            for p in /mnt/proc/[0-9]*; do
+              pid=${p#/mnt/proc/}
+              [ -r "$p/cmdline" ] || continue
+              c=$(tr "\0" " " < "$p/cmdline" 2>/dev/null)
+              [ -z "$c" ] && continue
+              case "$c" in *xmrig*|*miner*|*stratum*|*kinsing*|*kdevtmpfsi*) echo "HIT $pid: $c";; esac
+            done
+            echo "M_CRON"
+            for f in /mnt/etc/crontab /mnt/etc/cron.d/* /mnt/var/spool/cron/*; do
+              [ -f "$f" ] && { echo "-- $f"; grep -vE "^#|^$" "$f" 2>/dev/null | head -6; }
+            done
+            echo "M_DONE"
+          ' 2>&1 | head -70
+          exit 0