https://github.com/osquery/osquery logo
Title
e

Esteban

08/02/2022, 4:48 PM
Hello, I'm having an issue with Kolide launcher:
{"caller":"launcher.go:133","err":"launching osquery instance: starting instance: could not calculate osquery file paths: extension path does not exist: C:\\Program Files\\Kolide\\Launcher-launcher\\bin\\osquery-extension.exe: CreateFile C:\\Program Files\\Kolide\\Launcher-launcher\\bin\\osquery-extension.exe: El sistema no puede encontrar el archivo especificado.","level":"info","msg":"interrupted","ts":"2022-08-02T16:42:40.1333351Z"}
Here's my build command
.\build\package-builder.exe make --hostname <http://osquery.dpsit.gba.gob.ar:443|osquery.dpsit.gba.gob.ar:443> --enroll_secret ******** --targets windows-service-msi --insecure --output_dir .
s

seph

08/02/2022, 5:37 PM
What version are you building?
e

Esteban

08/02/2022, 5:57 PM
Osquery or Kolide Launcher?
s

seph

08/02/2022, 7:11 PM
Launcher
e

Esteban

08/02/2022, 7:21 PM
branch: master revision: 36ff746fa38221c6d9ac938aff3aeea6d2fb4fa1 build date: 2022-08-02 go version: go1.18.5
s

seph

08/02/2022, 7:22 PM
Is that package builder or launcher?
e

Esteban

08/02/2022, 7:22 PM
i'm sorry, package-builder
s

seph

08/02/2022, 7:23 PM
On windows, what does
launcher debug
do?
(run from a powershell)
it will try to start launcher in debug mode, and I want to see if it fails
Hrm. hold up
Sorry, this is hard to explain. By default, package-builder fetches launcher from the stable channel. So when you ran that version command, was it from a build launcher, or from the one in the msi?
e

Esteban

08/02/2022, 7:27 PM
I don't understand, i've cloned the repo and ran make deps make build make package-builder
s

seph

08/02/2022, 7:29 PM
Right, so you now have a
build/launcher.exe
from
36ff746fa38221c6d9ac938aff3aeea6d2fb4fa1
. But that’s not what package-builder uses. Instead, package-builder downloads the current stable launcher. (which is not that) On the host you installed that MSI, launcher will be somewhere in
C:\Program Files\Kolide\
e

Esteban

08/02/2022, 7:30 PM
Yes, I have that folder in Program Files
s

seph

08/02/2022, 7:30 PM
But I suspect this is skew between the stable luncher (0.11.26) and the head version of package-builder (0.12.1)
I think I can promote 12.1 to stable, and that might be the simplest thiong
e

Esteban

08/02/2022, 7:32 PM
So launcher is behind package-builder?
Also I noticed that i dont have osquery-extesion.exe (which it seems to be the binary that cant be found)
s

seph

08/02/2022, 7:32 PM
No. Stable releases are behind the git head.
Correct.
osquery-extesion.exe
is deprecated and shoudln’t be needed any more
e

Esteban

08/02/2022, 7:37 PM
Right
s

seph

08/02/2022, 7:43 PM
Okay! I have now declared 0.12.1 stable. Would you try a new MSI and seeing if you still have that issue?
e

Esteban

08/02/2022, 7:46 PM
It works now, thanks!
s

seph

08/02/2022, 7:46 PM
Nice. Almost certainly that skew that. Glad it’s working