If you build a TGZ package the augeas lenses are installed in /usr/local/share/osquery/lenses.. but how does osquery pick that up? I see the path is set to /usr/share/osquery/lenses in osquery/tables/system/posix/augeas.cpp but I can't figure out where the /usr/local/share path would be set..

It’s a CLI flag https://osquery.readthedocs.io/en/stable/installation/cli-flags/