Hi everyone, in the past week, I have created a number of PRs to upstream the changes we make in the osquery fork we use at my job. Thanks
@zwass for being on top of things and help review and merge. I finally created 3 more PRs that may be controversial:
⢠reverting optimization in RPM table
github.com/osquery/osquery/pull/9178 , it was terrible on our performance
⢠reverting readfile
github.com/osquery/osquery/pull/9179 for the same reason, it made reading through /proc too expensive
⢠adding containerd tables for linux
github.com/osquery/osquery/pull/9180 with a dependency on grpc.
Please check them out, I am interested in your take on these.