Title
#extensions
hubert dulay

hubert dulay

06/10/2022, 12:43 PM
Also tried ubuntu with the same error. Thanks
a

alessandrogario

06/10/2022, 1:32 PM
This seems like a problem with the extension itself
1:32 PM
see if it can be started directly with the same path
s

seph

06/10/2022, 1:55 PM
Yeah… Sounds like the extension is exiting, and osquery respawns it. Try running it manually.
hubert dulay

hubert dulay

06/10/2022, 2:29 PM
no errors when i run manually.
2:30 PM
i think it might be a permissions issue with installing mods with pip
2:39 PM
found the error. i had to:
chmod +x pulsar.ext
s

seph

06/10/2022, 2:39 PM
That makes sense — so how were you running it manually that it worked?
hubert dulay

hubert dulay

06/10/2022, 2:40 PM
i called with python
2:40 PM
python pulsar.ext
s

seph

06/10/2022, 2:40 PM
Yeah…. That is fairly different.
hubert dulay

hubert dulay

06/10/2022, 2:41 PM
i also need to
ln -s python3 python
because osqueryd was looking for python
s

seph

06/10/2022, 2:41 PM
I don’t think osquery looks for python.
pulsar.ext
looks for python, and that’s controlled by the first line of that script.
hubert dulay

hubert dulay

06/10/2022, 2:42 PM
ah, makes sense now thanks all
a

alessandrogario

06/10/2022, 2:44 PM
Yeah I think you could replace it with
#!/usr/bin/env python3
hubert dulay

hubert dulay

06/18/2022, 1:15 AM
s

seph

06/18/2022, 1:16 AM
FWIW
OSQuery
is just
osquery
or if capitalized,
Osquery
1:18 AM
No comments about the code, but I ❤️ seeing osquery blog posts. Y’all do awesome things