Package Details: osquery-git 3.3.2.r0.g5188ce528-2

Git Clone URL: (read-only)
Package Base: osquery-git
Description: SQL powered operating system instrumentation, monitoring, and analytics.
Upstream URL:
Licenses: BSD
Submitter: m3thodic
Maintainer: m3thodic
Last Packager: m3thodic
Votes: 7
Popularity: 0.000007
First Submitted: 2016-07-17 08:27
Last Updated: 2019-02-28 03:43

Required by (1)

Sources (4)

Pinned Comments

m3thodic commented on 2017-02-28 01:55


You may have to rm -rf /var/osquery if osqueryd fails to start!


Latest Comments

1 2 3 Next › Last »

jvreeland commented on 2019-08-05 21:16

The included patches don't seem to apply anymore

m3thodic commented on 2018-04-13 05:02

@badpixel I typically use yay or yaourt which auto-resolves dependencies from the AUR -- I dunno if makepkg has that capability.

badpixel commented on 2018-04-10 19:37

when try to build i have:

% makepkg -sriC <br> ==> Making package: osquery-git 3.2.0.r4.g7818b941-1 (Tue Apr 10 16:32:53 -03 2018) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Installing missing dependencies... error: target not found: aws-sdk-cpp-git error: target not found: benchmark error: target not found: linenoise error: target not found: beecrypt error: target not found: magic error: target not found: cpp-netlib warning: skipping target: python-jinja error: target not found: rocksdb-lite error: target not found: apt error: target not found: dpkg error: target not found: rpm-org error: target not found: librdkafka-git error: target not found: libc++ ==> ERROR: 'pacman' failed to install missing dependencies. ==> WARNING: Failed to remove installed dependencies.

m3thodic commented on 2018-03-24 18:35

@viq Hey yeah sorry it took so long, there were a few pull requests I was watching to see what the resolution was gonna be between osquery and rocksdb. I spent way too long banging my head looking for a workaround. You'd think since Facebook owns both properties each respective team would've/should've addressed this issue earlier, but anyway glad to see its working for you again!

viq commented on 2018-03-23 10:34

@m3thodic it builds now, thank you!

viq commented on 2018-03-13 07:37

@m3thodic any ideas?

viq commented on 2018-03-08 21:10

I'm seeing same error with 5.10.4-2 installed.

m3thodic commented on 2018-03-08 19:18

@viq I just pushed a small change to rocksdb-lite -- please test that and try osquery again. Sorry for the confusion, they all built for me fine (I always test builds before pushing).

viq commented on 2018-03-08 16:54

@m3thodic I'm getting exactly the same error with freshly recompiled rocksdb-lite 5.10.4-1

$ pacman -Q rocksdb-lite
rocksdb-lite 5.10.4-1

-- Building osqueryd: /home/viq/.cache/pacaur/osquery-git/src/osquery-git/osquery/osqueryd
cd /home/viq/.cache/pacaur/osquery-git/src/osquery-git/osquery && /usr/bin/cmake -E cmake_link_script CMakeFiles/daemon.dir/link.txt --verbose=1
/usr/bin/g++  -std=c++14   -Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now -rdynamic CMakeFiles/daemon.dir/devtools/shell.cpp.o CMakeFiles/daemon.dir/main/main.cpp.o CMakeFiles/daemon.dir/main/posix/main.cpp.o  -o osqueryd -Wl,-whole-archive libosquery.a -Wl,-no-whole-archive -Wl,-whole-archive libosquery_additional.a -Wl,-no-whole-archive -lz -Wl,-Bdynamic -lgflags -Wl,-Bdynamic -lthrift -ldl -Wl,-Bstatic -lboost_system -lboost_filesystem -lboost_thread -lboost_context -Wl,-Bdynamic -lrt -lc -lglog -rdynamic -Wl,-zrelro -Wl,-znow -pie -Wl,--build-id -static-libstdc++ -ludev -laudit -larchive -lzstd -lrdkafka -Wl,-Bstatic -laws-cpp-sdk-kinesis -laws-cpp-sdk-firehose -laws-cpp-sdk-core -laws-cpp-sdk-sts -Wl,-Bdynamic -lresolv -lcryptsetup -ldevmapper -llvm2app -lgcrypt -lgpg-error -lblkid -lip4tc -Wl,-Bstatic -ldpkg -Wl,-Bdynamic -llzma -lrpm -lrpmio -Wl,-Bstatic -lpopt -Wl,-Bdynamic -ldb -laugeas -lfa -lxml2 -Wl,-Bstatic -laws-cpp-sdk-ec2 -Wl,-Bdynamic -ltsk -lyara -llldpctl -lrocksdb_lite -Wl,-Bstatic -lboost_regex -Wl,-Bdynamic -lssl -lcrypto -lpthread -lmagic -lbz2 -luuid
libosquery_additional.a(rocksdb.cpp.o):([_ZTIN7osquery17GlogRocksDBLoggerE]+0x10): undefined reference to `typeinfo for rocksdb::Logger'
collect2: error: ld returned 1 exit status

m3thodic commented on 2018-03-08 10:08

@viq This update requires a recompile of rocksdb-lite -- they changed the way they export their symbols. Reinstall rocksdb-lite and try osquery again. Let me know if that worked for you.