Title
#general
e

eliran elisha

07/05/2021, 9:04 AM
Hi the have version of osquery to Raspbian 10 ?
a

alessandrogario

07/06/2021, 8:24 AM
Hello @eliran elisha! The ARM build should work fine on Raspbian 10: https://pkg.osquery.io/linux/osquery-4.9.0_1.linux_aarch64.tar.gz
e

eliran elisha

07/06/2021, 8:51 AM
thanks , the guide of instillation?
a

alessandrogario

07/06/2021, 10:08 AM
Can you paste the output of what happens when you attempt to run the osquery binary?
e

eliran elisha

07/06/2021, 11:57 AM
here the output: ./osqueryi: 1: ./osqueryi: ELF��@�$�@8 @: not found ./osqueryi: 1: ./osqueryi: : not found ./osqueryi: 1: ./osqueryi: ./osqueryi: 2: ./osqueryi: : not found P�P����a�� |||\� R�td|||P��P�td �� �� ������Q�td���DD/lib/ld-linux-aarch64.so.1GNU �GNU�Uˮ��忞fG��a��L�@ (7: not found ./osqueryi: 3: ./osqueryi: �!.9@T[bky�����������������: not found ./osqueryi: 4: ./osqueryi: Syntax error: "(" unexpected
11:57 AM
I run the command sudo ./osqueryi
a

alessandrogario

07/06/2021, 1:50 PM
Ok this is unexpected, can you run
file osqueryi
and paste the output here?
1:59 PM
You can also dump the ELF header with
readelf -a osqueryd > osquery_elf.txt
1:59 PM
alternatively, can you try
./osqueryd -S
?
e

eliran elisha

07/06/2021, 2:07 PM
./osqueryd: 1: ./osqueryd: ELF��@�$�@8 @: not found ./osqueryd: 1: ./osqueryd: : not found./osqueryd: 1: ./osqueryd: : not found ./osqueryd: 2: ./osqueryd: P�P����a�� |||\� R�td|||P��P�td �� �� ������Q�td���DD/lib/ld-linux-aarch64.so.1GNU �GNU�Uˮ��忞fG��a��L�@ (7: not found ./osqueryd: 3: ./osqueryd: �!.9@T[bky�����������������: not found ./osqueryd: 4: ./osqueryd: Syntax error: "(" unexpected
2:09 PM
what I did is extract the tar that you sent , and try run the ./osqueryi that i miss part ?
a

alessandrogario

07/06/2021, 6:18 PM
Ok this is weird; I'll see if I can reproduce this. You are using Raspbian 10 right? I think I have a raspberry pi somewhere
e

eliran elisha

07/07/2021, 7:05 AM
Yes my os is Raspbian 10 GNU/Linux with armv7l
9:16 AM
Hi I have architecture x86 mybe it the problem ?
a

alessandrogario

07/08/2021, 11:04 AM
What do you mean? If the architecture is completely wrong (i.e. running x86 binaries on AArch64 or vice-versa) the error message should point it out