example

Question

example <https github com kolide go extension tutorial blob ad201cb14a3ff7d7328ca5f8f66a9b0bfb81ae47 pkg gist gist go L19>

Jordan · Answer

This is a good method for testing but what if I wanted to push to 100 computers with osquery ENVs aren t IMO ideal if there is no method for getting the data from the flagfile is the next best option to parse it in the extension

groob · Answer

Why are ENVs not ideal

groob · Answer

use a JSON file if you prefer and load it from a specific location

Jordan · Answer

I really dont have a answer to that I just feel managing ENVs across an enterprise sounds painful Maybe I am mistaken The JSON sounds okay would adding functionality to the API to leverage the flagfile even be possible

Jordan · Answer

because I would have to assume that the extensions get loaded after the flagfile vars again im assuming

groob · Answer

you can t use CLI flags to configure your extension the architecture of osquery + extensions makes it not possible

Jordan · Answer

gotcha

groob · Answer

env vars are no more or less difficult than a file or CLI flags You just add them to your launchd systemd file and you re done

groob · Answer

like this systemd exampe <https github com kolide go extension tutorial blob ad201cb14a3ff7d7328ca5f8f66a9b0bfb81ae47 osquery extension service L7 L13>

groob · Answer

launchd looks very similar

Jordan · Answer

fair enough ill give it a whirl thanks again