Title
#kolide
g

groob

07/25/2018, 7:51 PM
we chose a separate directory specifically so you can install the osquery package on your own
n

n8felton

07/25/2018, 7:54 PM
I'm torn on how to handle this then. Do I just use munki deploy non-launcher osquery and configure it with munki to talk with fleet, and stop using launcher all together. Seems like overhead to have osquery essentially installed twice.
7:54 PM
I like the goals of launcher with the auto config and auto update
7:55 PM
maybe I just ship my own package that symlinks to the launcher location
g

groob

07/25/2018, 8:12 PM
i’m not sure what you’re trying to accomplish
8:12 PM
why do you want osqueryi
n

n8felton

07/25/2018, 8:15 PM
My main goal is the deploy osquery to my managed machines, and launcher seems like the right mechanism for that. But in deploying osquery, I'd still like to be able to run queries at the terminal if i'm at a local computer.
8:16 PM
I could just run
/usr/local/launcher/bin/osqueryd -S
but it seems clunky if the standard install of osquery makes
osqueryi
available.
g

groob

07/25/2018, 8:17 PM
why do you want osqueryi
n

n8felton

07/25/2018, 8:19 PM
mostly because that's what a lot of what i've been exposed to says to use. If you take fleet and launcher out of the equation, you end up with using
osqueryi
. I guess I was under the impression (originally) that Launcher did nothing more than install exactly what you would download from https://osquery.io/downloads/
8:19 PM
but it appears that launcher is actually doing a "custom" install instead
cwhits

cwhits

07/25/2018, 8:19 PM
it's easier to remember
osqueryi 'select hardware_model from system_info'
g

groob

07/25/2018, 8:53 PM
launcher puts osqueryd for its own use into a directory
8:53 PM
it’s there not to interfere with your own osquery install
8:54 PM
it’s questionable that you need laucnher vs your own config, but launcher does offer some benefits
8:58 PM
osqueryi
is only useful to a human though
8:58 PM
and it’s fine to install it on your machine for things
8:59 PM
it’s questionable that you would want to deploy osqueryi to every machinein the fleet
8:59 PM
that’s what the daemon is for
8:59 PM
and that’s why live query exists as a feature 🙂
9:00 PM
anyway.. not trying to persuade you one way or another, just giving context about the launcher