https://github.com/osquery/osquery logo
Join Slack
Powered by
Can someone shed some light on this? Running lates...
# fleet
d
Can someone shed some light on this? Running latest fleetctl from a Mac (ARM). The fleet server is also latest.
Copy code
❯ ./fleetctl package --type=pkg --fleet-desktop --fleet-url=<https://REDACTED.com> --enroll-secret=REDACTED
Generating your osquery installer...
Error: create orbit dir: Path /var/folders/0m/j0pfdbrj1v3f0rj22ktydcdm0000gn/T/orbit-package832843677/root already exists with mode 20000000700 instead of the expected 20000000755
Similar with the ‘advanced’ method.
Copy code
❯ ./fleetctl package --type=pkg --fleet-url=<https://REDACTED.com> \
--enroll-secret=REDACTED \
--fleet-certificate=fleet.pem
Generating your osquery installer...
Error: create orbit dir: Path /var/folders/0m/j0pfdbrj1v3f0rj22ktydcdm0000gn/T/orbit-package3344373369/root already exists with mode 20000000700 instead of the expected 20000000755
Mac is an M1 running Ventura. I may have had osquery running on this machine in the past.
d
hmmm, @Daniel Cross I've never seen that before but what happens if you 
sudo
the command? Looks like some kind of permissions issue 700 vs 755. Or, maybe 
chmod
the 
0m
folder recursively to 755?
d
Similar, but with sudo it’s trying 
/tmp
Copy code
Generating your osquery installer...
Error: create orbit dir: Path /tmp/orbit-package1842156953/root already exists with mode 20000000700 instead of the expected 20000000755
d
I found a very similar thread. Are you by chance running fleetctl on a vm on the M1 mac with rosetta?
d
This is not in a VM, just a zsh terminal on Mac M1. I also cannot run fleetctl in a Linux VM on the M1 as the VM is aarch64, and I don’t think a Linux fleetctl for ARM has been released.
Copy code
❯ ./fleetctl
zsh: exec format error: ./fleetctl
aaaand I get similar trying on an x86 Linux ‘on the metal’ laptop.
Copy code
daniel.cross@x1 ~/fleetctl_v4.36.0_linux
❯ ./fleetctl package --type=pkg --fleet-desktop --fleet-url=<https://REDACTED.com> --enroll-secret=REDACTED
Generating your osquery installer...
Error: create orbit dir: Path /tmp/orbit-package973367418/root already exists with mode 20000000700 instead of the expected 20000000755

 [1]  daniel.cross@x1 ~/fleetctl_v4.36.0_linux
❯ uname -a
Linux x1 6.4.11-100.fc37.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 16 17:55:16 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
(and the same for sudo)
I’ve tried to add 
--debug
and get no further info.
k
Did you build fleetctl, or download the binary?
It looks like the latter, but I want to be sure.
d
All of these are downloaded from the latest release on Github.
g
hi @Daniel Cross, did you try to recursively 
chmod
the directory to 755 where the package is building? it looks like there is some permission issue here and that may help.
d
@Gabe Hernandez On the mac The /var dir is already writable (owned) by my user
Copy code
[1]  daniel.cross@Daniels-MBP-2 ~
❯ sudo ls -al /var/folders/0m/j0pfdbrj1v3f0rj22ktydcdm0000gn/T/ | head -n 3
total 0
drwx------@ 299 daniel.cross  staff  9568 11 Sep 10:25 .
drwxr-xr-x@   6 daniel.cross  staff   192 31 Mar  2022 ..
/tmp is already writable (which is was was used in the sudo example, and sudo should work anyhow):
Copy code
❯ sudo ls -al /tmp
Password:
lrwxr-xr-x@ 1 root  wheel  11 15 Jun 20:08 /tmp -> private/tmp

   daniel.cross@Daniels-MBP-2 ~
❯ sudo ls -al /private/tmp
total 520
drwxrwxrwt  14 root          wheel     448 11 Sep 10:23 .
Fedora host /tmp is writable.
Copy code
❯ ls -al /tmp | head -n3
total 4053272
drwxrwxrwt. 20 root         root            25940 Sep 11 09:50 .
dr-xr-xr-x.  1 root         root              158 Nov  5  2022 ..
I can 
touch
files into all of these locatioøs.
t
I'm fighting this as well. Did you ever figure it out?
d
I haven’t looked since, moved on to other things for now.
5 Views
Open in Slack
PreviousNext
Powered by