These packages are built and signed by the osquery development team. They are mostly universal and use a minimal number of run-time library dependencies. This means the binaries are abnormally big (~20MB).
For release notes please visit https://github.com/facebook/osquery/releases.Downloads
~ $ ls osquery-latest/ | ./hashthem.sh
{% assign current_version = versions.first %} {% assign version_number = current_version.version %} {% for key in current_version %} {% if key[0] != 'version' and key[0] != 'debug' %} {% assign os = key[0] %} {% assign prefix = site.prefixes[os] %} {% assign sep = site.separators[os] %} {% assign hash = key[1] %}https://pkg.osquery.io/{{os}}/osquery{{sep}}{{version_number}}{{prefix}}
{{hash}}
{% endif %} {% endfor %}To take advantage of the most current features and join the osquery development community we like to suggest building from source! Head to GitHub clone and compile.
Build Instructions
$ git clone http://github.com/facebook/osquery.git
$ cd osquery
$ make deps
$ make -j 8
$ ./build/<platform>/osquery/osqueryi
We publish osquery to a yum repository. The RPMs have extremely few dependencies and should work on *most* x86_64 Linux operating systems. You may install the "auto-repo-add" RPM or add the repository target.
yum Install
$ curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery
$ sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo
$ sudo yum-config-manager --enable osquery-s3-rpm
$ sudo yum install osquery
We publish osquery to an apt repository. The DEBs have extremely few dependencies and should work on *most* x86_64 Linux operating systems.
apt Install
$ export OSQUERY_KEY=1484120AC4E9F8A1A577AEEE97A80C63C9D8B80B
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys $OSQUERY_KEY
$ sudo add-apt-repository "deb [arch=amd64] https://pkg.osquery.io/deb deb main"
$ sudo apt-get update
$ sudo apt-get install osquery
We recommend installing and deploying Windows support using chocolatey. Please let us know if your enterprise could make use of other package formats.
Windows Install
C:\> choco install osquery
These packages contain debug binaries or the debuginfo symbols. The packages are available in yum/apt using the respective debug name.
Debug Downloads
~ $ ls osquery-debug-latest/ | ./hashthem.sh
{% assign current_version = versions.first %} {% assign version_number = current_version.version %} {% for key in current_version.debug %} {% assign os = key[0] %} {% assign prefix = site.prefixes[os] %} {% assign sep = site.separators[os] %} {% assign hash = key[1] %} {% assign dbg = site.debug_prefixes[os] %}https://pkg.osquery.io/{{os}}/osquery-{{dbg}}{{sep}}{{version_number}}{{prefix}}
{{hash}}
{% endfor %}We continue to host previous releases of osquery and make them available for download. These are our last three releases for Linux and Darwin.
Previous Releases
~ $ ls osquery-previous-{{previous_os}}/ | ./hashthem.sh
{% for previous_version in versions offset:1 limit:3 %} {% assign version_number = previous_version.version %} {% for key in previous_version %} {% if key[0] == previous_os %} {% assign prefix = site.prefixes[previous_os] %} {% assign sep = site.separators[previous_os] %} {% assign hash = key[1] %}https://pkg.osquery.io/{{previous_os}}/osquery{{sep}}{{version_number}}{{prefix}}
{{hash}}
{% endif %} {% endfor %} {% endfor %}{% endfor %}