Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hey guys, so while installing osquery in docker images in a M1 laptop, I noticed that the `ubuntu:20.04` images identify the architecture as `aarch64` instead of `arm64`. Does it make sense to duplicate the published package to be both `arm64` and `aarch64`?

Do you mean in the package metadata or package filename?

I think it makes sense to follow the "norm" for the specific distributions.

In the package name. So basically it would mean copying the file `osquery_4.7.0-1.linux_arm64.deb` into `osquery_4.7.0-1.linux_aarch64.deb`  and having both available

So if I am getting the architecture from the live system/container, and get it from the command `arch`, I would get `aarch64` instead of `arm64` since that is the "norm" for Ubuntu/Linux

Ah yes, for filenames, from what I understand Debian/Ubuntu and `.deb`s have standardized on using `arm64` and `.rpm`s are using `aarch64`, which is quite a pain.