Andrew Zick
02/02/2023, 8:16 PM--update-url
and --update-roots
, everything works great! So I figure maybe fleetctl needs a minimum version or something? Which means I just need to get newer binaries of orbit and osquery from….somewhere?&data.TargetFileMeta
bit is from a debug log that we stuck in the go code: fmt.Printf("%#v\n", osquerydMeta)
in the file orbit/pkg/packaging/packaging.go
in the function func InitializeUpdates(updateOpt update.Options) (*UpdatesData, error)
--host-id
is a custom argument that we added for passing the host-identifier to osquery during packagingzwass
02/02/2023, 8:43 PMAndrew Zick
02/02/2023, 9:26 PM<mailto:andrew.zick@secureframe.com|andrew.zick@secureframe.com>
, I’m just a dev but I bet I can find the right person for sales to talk to 🙂
What exactly does “self-hosted TUF servers using Fleet’s tooling” mean? E.g. are you’re talking about using fleetctl? Updating via <http://tuf.fleetctl.com|tuf.fleetctl.com>
? Something else?zwass
02/02/2023, 9:27 PMfleetctl updates
subcommands to generate and maintain a TUF repo.
fleetctl updates --help
NAME:
fleetctl updates - Manage client updates
USAGE:
fleetctl updates command [command options] [arguments...]
DESCRIPTION:
fleetctl updates commands provide the initialization and management of a TUF-compliant update repository.
This functionality is licensed under the Fleet EE License. Usage requires a current Fleet EE subscription.
Andrew Zick
02/02/2023, 9:28 PMzwass
02/02/2023, 9:29 PMAndrew Zick
02/02/2023, 9:38 PMfleetctl package
works when I let it use the defaults for --update-url
and --update-roots
which are Fleet’s TUF repo + root key metadata.
But when I try using my own TUF repo that lives in S3, I get the weird error. My TUF repo probably hasn’t been touched in over a year so all the targets are very old (versions in op).
Which is why I was wondering if the issue was a newer fleetctl
that can’t package really old orbit/osqueryd binaries. Totally reasonable if that’s the case!
Also totally reasonable if debugging this weird custom case requires paying for support, people’s time isn’t free 👍zwass
02/02/2023, 10:13 PMupdate-url
and update-roots
it sounds like you are trying to use a self-hosted TUF repo which would be generated with the premium licensed fleetctl updates
commands. Let me work on getting the right folks connected. Thanks!Andrew Zick
02/02/2023, 10:15 PMfleetctl updates
but that definitely doesn’t mean it wasn’t used initially and then just not documented.
edit: fixed the double negative, woops