--- layout: default title: Downloads permalink: /downloads/ --- {% assign versions = site.data.versions %}

Packages and tarballs

These packages are built and signed by the osquery development team. They are mostly universal and use a minimal number of run-time library dependencies. This means the binaries are abnormally big (~20MB).

For release notes please visit https://github.com/facebook/osquery/releases.

Downloads

~ $ ls osquery-latest/ | ./hashthem.sh

{% assign current_version = versions.first %} {% assign version_number = current_version.version %} {% for key in current_version %} {% if key[0] != 'version' and key[0] != 'debug' %} {% assign os = key[0] %} {% assign prefix = site.prefixes[os] %} {% assign sep = site.separators[os] %} {% assign hash = key[1] %}

https://pkg.osquery.io/{{os}}/osquery{{sep}}{{version_number}}{{prefix}}

{{hash}}

{% endif %} {% endfor %}

Build osquery

To take advantage of the most current features and join the osquery development community we like to suggest building from source! Head to GitHub clone and compile.

Build Instructions

$ git clone http://github.com/facebook/osquery.git

$ cd osquery

$ make deps

$ make -j 8

$ ./build/<platform>/osquery/osqueryi

Install yum repository

We publish osquery to a yum repository. The RPMs have extremely few dependencies and should work on *most* x86_64 Linux operating systems. You may install the "auto-repo-add" RPM or add the repository target.

yum Install

$ curl -L https://pkg.osquery.io/rpm/GPG | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-osquery

$ sudo yum-config-manager --add-repo https://pkg.osquery.io/rpm/osquery-s3-rpm.repo

$ sudo yum-config-manager --enable osquery-s3-rpm

$ sudo yum install osquery

Install apt repository

We publish osquery to an apt repository. The DEBs have extremely few dependencies and should work on *most* x86_64 Linux operating systems.

apt Install

$ export OSQUERY_KEY=1484120AC4E9F8A1A577AEEE97A80C63C9D8B80B

$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys $OSQUERY_KEY

$ sudo add-apt-repository "deb [arch=amd64] https://pkg.osquery.io/deb deb main"

$ sudo apt-get update

$ sudo apt-get install osquery

Windows Choco Package

We recommend installing and deploying Windows support using chocolatey. Please let us know if your enterprise could make use of other package formats.

Windows Install

C:\> choco install osquery

Debug packages (also in package repos)

These packages contain debug binaries or the debuginfo symbols. The packages are available in yum/apt using the respective debug name.

Debug Downloads

~ $ ls osquery-debug-latest/ | ./hashthem.sh

{% assign current_version = versions.first %} {% assign version_number = current_version.version %} {% for key in current_version.debug %} {% assign os = key[0] %} {% assign prefix = site.prefixes[os] %} {% assign sep = site.separators[os] %} {% assign hash = key[1] %} {% assign dbg = site.debug_prefixes[os] %}

https://pkg.osquery.io/{{os}}/osquery-{{dbg}}{{sep}}{{version_number}}{{prefix}}

{{hash}}

{% endfor %}

Previous Releases

We continue to host previous releases of osquery and make them available for download. These are our last three releases for Linux and Darwin.

Previous Releases

{% assign previous_version_operating_systems = 'linux darwin' | split: ' ' %} {% for previous_os in previous_version_operating_systems %}

~ $ ls osquery-previous-{{previous_os}}/ | ./hashthem.sh

{% for previous_version in versions offset:1 limit:3 %} {% assign version_number = previous_version.version %} {% for key in previous_version %} {% if key[0] == previous_os %} {% assign prefix = site.prefixes[previous_os] %} {% assign sep = site.separators[previous_os] %} {% assign hash = key[1] %}

https://pkg.osquery.io/{{previous_os}}/osquery{{sep}}{{version_number}}{{prefix}}

{{hash}}

{% endif %} {% endfor %} {% endfor %}

 

{% endfor %}