hello.. i am trying to build osquery toolchain for arm (32bit) from the repo https://github.com/osquery/osquery-toolchain; my build machine is aarch64.
can someone help about what all things to be changed to build it successfully for arm (32bit)?
01/20/2023, 8:59 AM
I don’t think it’s going to be easy to build for 32-bit
Not only you need to rebuild the toolchain, but also go through all the libraries inside osquery (https://github.com/osquery/osquery) and manually regenerate the configs for each one of them
This process is done to ensure that those libraries are built the same way regardless of the host where the build happens, in order to always correctly target the reference Linux OS (was CentOS 6 until recently, now we are moving to CentOS 7)
If your machine is indeed an aarch64, I would just consider migrating to 64-bit
01/20/2023, 11:53 AM
thank you for the information. i ll get back with more questions if needed. thank you.
01/20/2023, 11:55 AM
One alternative approach could be to use the system toolchain (i.e. not use osquery-toolchain) and then update the libraries folder so that dependencies are taken locally (you’ll have to install them from the package manager)
The downside to that is that the binary will have to be recompiled for each 32-bit ARM distribution (and version) you want to support
01/20/2023, 3:17 PM
I’m not sure osquery itself supports 32bit any more. I kinda recall us talking about it, and dropping it. But I might be wrong?
01/20/2023, 3:18 PM
Yes it's possible there will be (subtle to find) errors
my personal opinion is that 32-bit is now deprecated and should not be officially supported
01/20/2023, 3:20 PM
Yes, osquery does not support 32bit.
But folks can try to make it work. But, I don’t know how far it’ll get