Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

Hey all. Is it possible to create an osx or windows orbit package from a Linux fleet deployment? I k ow windows requires docker, but trying to create type "pkg" gives an exec error and never finishes

Hi Remington! This should be possible. Would you mind sharing a screenshot of the error you are seeing? Or if you could provide some additional context, that would help trying to understand the particular problem you are encountering. Thanks!

Hi Remington, I just wanted to follow up because I was able to confirm that currently Orbit for macOS can only be generated from macOS right now. Please let us know if you are still experiencing difficulties with Windows though.

This is the error from trying to generate an MSI from linux

```go run ./cmd/package --type=msi --fleet-url=<http://REDACTED:1337> --insecure --enroll-secret=REDACTED```
```2021-06-17T22:09:04Z FTL package failed error="initialize updates: failed to get osqueryd: exec new version: : fork/exec /tmp/orbit-package173390597/root/staging/osqueryd.exe```

<@U0254KT09CJ> any help would be most appreciated. The documentation isnt terribly helpful for package building

Thank you for the additional info. I've put this on our schedule to discuss with the team tomorrow.

<@U0254KT09CJ> Would it help if I filed a git issue?

<@U0254KT09CJ> I created issue <https://github.com/fleetdm/fleet/issues/1144> to track this bug

Just checking back to see if this is a bug or user error

Thank you for creating the issue for this.  We're going to dig in and will follow up on GitHub.  Thanks again!