Hi the have version of osquery to Raspbian 10 ?
# general
e
Hi the have version of osquery to Raspbian 10 ?
a
Hello @eliran elisha! The ARM build should work fine on Raspbian 10: https://pkg.osquery.io/linux/osquery-4.9.0_1.linux_aarch64.tar.gz
e
thanks , the guide of instillation?
a
Can you paste the output of what happens when you attempt to run the osquery binary?
e
here the output: ./osqueryi: 1: ./osqueryi: ELF��@�$�@8 @: not found ./osqueryi: 1: ./osqueryi: : not found ./osqueryi: 1: ./osqueryi: ./osqueryi: 2: ./osqueryi: : not found P�P����a�� |||\� R�td|||P��P�td �� �� ������Q�td���DD/lib/ld-linux-aarch64.so.1GNU �GNU�Uˮ��忞fG��a��L�@ (7: not found ./osqueryi: 3: ./osqueryi: �!.9@T[bky�����������������: not found ./osqueryi: 4: ./osqueryi: Syntax error: "(" unexpected
I run the command sudo ./osqueryi
a
Ok this is unexpected, can you run
file osqueryi
and paste the output here?
You can also dump the ELF header with
readelf -a osqueryd > osquery_elf.txt
alternatively, can you try
./osqueryd -S
?
e
./osqueryd: 1: ./osqueryd: ELF��@�$�@8 @: not found ./osqueryd: 1: ./osqueryd: : not found./osqueryd: 1: ./osqueryd: : not found ./osqueryd: 2: ./osqueryd: P�P����a�� |||\� R�td|||P��P�td �� �� ������Q�td���DD/lib/ld-linux-aarch64.so.1GNU �GNU�Uˮ��忞fG��a��L�@ (7: not found ./osqueryd: 3: ./osqueryd: �!.9@T[bky�����������������: not found ./osqueryd: 4: ./osqueryd: Syntax error: "(" unexpected
what I did is extract the tar that you sent , and try run the ./osqueryi that i miss part ?
a
Ok this is weird; I'll see if I can reproduce this. You are using Raspbian 10 right? I think I have a raspberry pi somewhere
e
Yes my os is Raspbian 10 GNU/Linux with armv7l
Hi I have architecture x86 mybe it the problem ?
a
What do you mean? If the architecture is completely wrong (i.e. running x86 binaries on AArch64 or vice-versa) the error message should point it out