Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
m
Mystery Incorporated
03/14/2022, 3:27 PMM1 macs are reporting as i486 I suspect that is an osquery issue not fleet?
👀 2
a
alessandrogario
03/14/2022, 3:55 PMCould that be Rosetta2?
✔️ 2
k
Kathy Satterlee
03/14/2022, 3:56 PMHi, @Mystery Incorporated! While osquery 5.2.2 does natively support the M1 architecture, the osquery installer generated by Fleet doesn't include a native installer as of yet. Because of that, you're seeing the architecture returned by Rosetta.
🎉 1
There is a plan to add a native installer for M1 in a future release.
Meanwhile, if it's something that you'd really like to have now, you can enroll your M1 macs using plain osquery. As long as you install the most recent version (5.2.2), you should be good to go.
m
Mystery Incorporated
03/14/2022, 4:58 PMI am using plain osquery but they are 5.0.1 is that my problem?
and some are 5.1.0
k
Kathy Satterlee
03/14/2022, 7:06 PMYes. Updating those M1 Macs to the latest release of osquery should do the trick.