Hi all, I see there is no packages fo osquery that support AIX, has there been any effort or plan to make this happen? If there hasn't been, since its open source my company might have us try to create our own package, so what would you think the amount of effort for this would be?

I am not aware of any plan or previous effort. I'm not familiar with AIX, but typically it's a large amount of effort to bring osquery to a new platform because there are a number of dependencies that must be compiled for the platform in addition to the osquery code itself.

okay thank you for the info on this Zach

I think some aix versions have shipped a Linux compatibility layer? Is that happening here? Is this a question specifically about packaging, or a question about porting to a new platform.

Its more of a question about if any of the osquery packages can run on AIX, since I don't see any of the osquery packages having the aix architecture looking like its supported. But I'm not that familiar with AIX, so are you saying that linux package should run properly on AIX?

“packages” usually refers to a collection of stuff for a specific operating system. Whereas binary usually refers to the compiled executable that’s running. For example. debian, ubutu, and redhat are all linux, and can all run the same underlying osquery binaries. But they use different packaging. (debian and ubuntu use “dpkg”. while redhat uses “rpm”)