https://github.com/osquery/osquery logo
Title
m

marnin

09/13/2022, 4:41 PM
Is there a schedule when Orbit on the stable channel will update osquery to version 5.5.1 or am I misunderstanding how this works?
k

Kathy Satterlee

09/13/2022, 5:42 PM
Hi @marnin! We don't have a specific schedule for bringing new osquery versions to the stable channel.
There's a lot of testing that happens and tweaks may be necessary, so it's difficult to judge ahead of time how long it might take.
Is there a reason you're keen to get up and running with 5.5.1?
m

marnin

09/13/2022, 6:19 PM
Thanks for the reply. Interested in the new
unified_log
table for macOS
k

Kathy Satterlee

09/13/2022, 6:22 PM
That's a cool one! If it's something you'd like to play with while you wait, you could deploy 5.5.1 to some hosts with vanilla osquery :)
m

marnin

09/13/2022, 6:23 PM
Yes, that’s probably what I’ll do
z

zwass

09/13/2022, 10:53 PM
We currently have 5.5.1 available on the
edge
channel. You'll get it if you build packages with
--osqueryd-channel=edge
or
--osqueryd-channel=5.5.1
(which would also disable updates because you would be pinning the package to 5.5.1. We will push it to the
stable
channel when osquery project declares it stable.
m

marnin

09/13/2022, 11:04 PM
Good info, thanks for following up. Is pushing to the stable channel when the release is declared stable the general workflow?
z

zwass

09/13/2022, 11:25 PM
Yes it is
We try to push to
edge
ASAP after the release is tagged and then to
stable
ASAP after the release is declared stable.
m

marnin

09/14/2022, 12:27 AM
This info would make a good addition to the Orbit readme.
z

zwass

09/14/2022, 4:09 AM
@Kathy Satterlee can you please help get this into the docs?