https://github.com/osquery/osquery logo
Title
m

Madhur Jodhwani

08/18/2021, 7:35 AM
through which function does client hit the server and how does orbit update osquery on client side, I mean what function is specific to that in orbit and like what is the work of tuf.fleetctl.com in this and what does it do, like does it help in updation or stuff like that and in how much time does client hit the server/poll the server or like server hits the client?
t

Tomas Touceda

08/18/2021, 1:38 PM
hi! are you asking for specific parts of the code? Orbit does updates using The Update Framework, you can read more about how that works in here https://theupdateframework.io/
m

Madhur Jodhwani

08/18/2021, 2:42 PM
I wanted to know about the functions that send requests and receive responses to the hosts and to the update framework and to the hosts as well and where are they in the files of orbit?
m

Madhur Jodhwani

08/18/2021, 5:48 PM
So, the checkInterval inside structure is the time after which it checks for updates?
t

Tomas Touceda

08/18/2021, 5:49 PM
it checks every 10 seconds
m

Madhur Jodhwani

08/18/2021, 5:51 PM
and how to find the exact url of the server where it sends requests responses and the headers?
Also thanks for the info
I also wanted to know that how to debug the code on the specified like 79 which you specified to find out all this stuff
it's configurable
as to how to debug, are you asking how to debug a Go application in general? or are you having trouble running orbit from source?
m

Madhur Jodhwani

08/18/2021, 6:06 PM
I mean whenever I debug I am debugging orbit source code from cmd/pkg.go, I want to debug it from orbit.go and launch my code for debbuging from there, what arguments should I pass to the debugger is my doubt.
t

Tomas Touceda

08/18/2021, 6:07 PM
depends on your setup. If you use GoLand as an IDE, it's pretty easy
m

Madhur Jodhwani

08/19/2021, 5:22 AM
I am using VS Code
So, orbit doesn't have code of update and request stuff but it does this through tuf framework, right?
I was having error while debugging this and it gave shell command error but the I commented it out and debugged and got this error that you can see at the bottom.
t

Tomas Touceda

08/19/2021, 1:22 PM
So, orbit doesn't have code of update and request stuff but it does this through tuf framework, right?
correct
got this error that you can see at the bottom.
sounds like you might not have enough permissions to write to that directory
m

Madhur Jodhwani

08/20/2021, 7:27 AM
Also, any idea how to change osqueryd name to like anything else like for e.g: xyz_daemon? without actually changing to much logic
t

Tomas Touceda

08/20/2021, 11:32 AM
I believe this is something that has been discussed a few times in #general, I don't recall the outcome of it
m

Madhur Jodhwani

08/23/2021, 6:48 AM
So ,it can't be renamed?
t

Tomas Touceda

08/23/2021, 4:40 PM
it probably can, just like any other daemon, but renaming it is not part of the set of standard configurable things in osquery