I have seen, but don’t have a reference, linux tools to take an existing MSI and swap a file. I think @defensivedepth might be using that to change MSIs around on linux machines.

ya, I am currently unpacking the MSI, making some edits and then re-packing it in an linux docker (https://github.com/Security-Onion-Solutions/securityonion-docker-hh/blob/master/so-fleet-launcher/launcher/generate-packages.sh#L56) - its hacky, but it works. Have some ideas for a better solution, at some point in the near future.