We're currently waiting for some testing on the windows events PR. Hoping to make pre-release packages this week.
06/17/2020, 4:20 PM
Alessandro is working on that testing today
06/17/2020, 4:57 PM
Also, there are some significant bugs opened as issues needing triage. Segfault when saving query cache (maybe) and EC2 tables incorrectly using a proxy.
06/17/2020, 5:44 PM
#6499 is the proxy. What’s the segfault, #6450? I don’t know that we need to hold the release for those. I mean… it would be great to fix, but it’s not strictly a regression. So if there’s nothing about to land, I’d rather not wait.
06/17/2020, 10:08 PM
Pushed an update on the Windows events PR, where I added new tests
I have saved a sample XML file for several event types on the channels we use, then the test goes through all the samples comparing the output with the expected data sets
I'm checking some remaining things then i'll remove the do-not-merge label as soon as I'm done
06/26/2020, 2:44 PM
any news for release?
06/26/2020, 2:45 PM
the PR has been merged and 4.4.0 has been tagged
binary packages are not ready yet but you can build the tag from source
06/26/2020, 2:49 PM
I will wait for the debian build then
06/26/2020, 2:53 PM
A bit of a warning though, it's better to use staging areas and not mass-deploy to production new releases as soon as binary packages are available
06/26/2020, 3:00 PM
any risk? you can imagine we build a image, then deploy same image to thousands of servers within a week… rolling upgrade of course
06/26/2020, 6:33 PM
While we try to make osquery upgrade seamless, there have been issues. Sometimes packaging bugs get missed, and sometimes there’s some kind of upgrade issue. Thus, we recommend doing some kind of testing before rolling out widely. If you have a rolling plan that accounts for that, awesome.