Package Details: kolide-launcher-git v0.13.5.r38.g854c6846-1

Git Clone URL: https://aur.archlinux.org/kolide-launcher-git.git (read-only, click to copy)
Package Base: kolide-launcher-git
Description: osquery command and control
Upstream URL: https://www.kolide.co/
Licenses: MIT
Submitter: Vitruvius
Maintainer: Vitruvius
Last Packager: Vitruvius
Votes: 1
Popularity: 0.000000
First Submitted: 2020-02-04 20:26 (UTC)
Last Updated: 2023-03-07 03:28 (UTC)

Dependencies (2)

Required by (0)

Sources (3)

Latest Comments

Henry78 commented on 2023-02-28 11:45 (UTC)

I needed to remove osquery-extension.ext as it was removed upstream, also changed pkgver to latest:

-pkgver=v0.11.22.r4.g554bd92
+pkgver=v0.13.6
-install -Dm755 "build/osquery-extension.ext" "${pkgdir}/usr/bin/osquery-extension.ext"

Vitruvius commented on 2021-09-21 15:55 (UTC)

The hostname, control, enroll_secret_path arguments need to be set to match your kolide fleet. As far as I know, the kolide launcher requires a remote grpc server to authenticate with. I've added comments in the launcher.conf to make this more clear.

The osquery version should be fairly flexible, as the osquery-extension in this package is compiled against the system osquery. If you enable autoupdate in the config, it will download those binaries and replace the system binaries.

adam-h commented on 2021-09-14 07:38 (UTC) (edited on 2021-09-14 07:39 (UTC) by adam-h)

This stopped working for me similarly. The fix for me was to add the following to /etc/kolide/launcher.conf

transport jsonrpc
hostname k2device.kolide.com
control
control_hostname k2control.kolide.com
enroll_secret_path /etc/kolide/secret

mark commented on 2021-09-09 15:15 (UTC) (edited on 2021-09-09 15:15 (UTC) by mark)

I had trouble getting this to work because it complained with messages like these:

{"caller":"main.go:30","msg":"Launcher starting up","revision":"d30592bbcec072fd6988d4e2346b1765f705084b","severity":"info","ts":"2021-09-09T06:29:26.910186055Z","version":"0.11.22"}
{"caller":"launcher.go:48","msg":"using default system root directory","path":"/tmp/launcher-root","severity":"info","ts":"2021-09-09T06:29:26.910511235Z"}
{"caller":"client_grpc.go:111","cert_pinning":false,"msg":"dialing grpc server","server":"","severity":"info","tls_secure":true,"transport_secure":true,"ts":"2021-09-09T06:29:26.910817348Z"}
{"caller":"logutil.go:13","dialing grpc server: split grpc server host and port: : missing port in address":"run launcher","severity":"info","ts":"2021-09-09T06:29:26.911067867Z"}

I contacted the Kolide support and they sent me a tar.gz that had updated launcher.conf, and different osqueryd and osquery-extension.ext (I just cmp'd them) which seems to work in the end, would you kindly check if this needs updating?