does osquery still support centos6? and why
# general
r
does osquery still support centos6? and why
s
Hey Ryan! I wouldn't say intentionally; when updating third party libraries CentOS 7 is the new minimum version that should be used. However the toolchain itself still needs to be updated and so it will still target the libc version of CentOS 6. Ultimately it's a matter of people of having the time to do the work!
I should also add about the toolchain that we are looking to update it, but there are some ebpf code incompatibilities with the code we have written in the past and the new toolchain (or new LLVM really): https://github.com/osquery/osquery/issues/8691 So updating the toolchain is partially gated by that.
s
Osquery does try to target pretty old machines -- this ensures compatibility across a wide range of things. While centos6 is on the way out, we do lag the cutting edge intentionally,
r
Yeah, i was mostly surprised since no one else seems to support CentOS 6. Most of the legacy glibc support tooling assumes CentOS 7 now.