search

kolide / launcher

Osquery launcher, autoupdater, and packager
https://kolide.com/launcher
Other
500 stars 99 forks source link

launcher kolide_grpc error #1690

Closed michaelkacz closed 1 month ago

michaelkacz commented 2 months ago

Some servers where I have the kolide launcher deployed receive an error:

Cannot call registry item: kolide_grpc

Following this error, the launcher shuts down, then stops the osqueryd task. These servers do not have internet connectivity, is there a way around this to avoid the service shutting down and disconnecting from my fleet? Along with this, is there a flag I can use to disable autoupdates? When adding "autoupdate=false" or "autoupdate false" into the launcher flags, it is an unknown command line flag.

directionless commented 2 months ago

Hi!

Launcher is increasingly designed to communicate with Kolide's online SaaS offering. You mentioned you're running it on servers that do not have network access, what is the purpose? What version are you running?

I cannot offhand remember if we still support disabling autoupdate, but if you omit autoupdate it would probably not be enabled.

kolide_grpc is the name launcher registers with osquery as. This extension no longer uses grpc, but is responsible for all the server communication. To understand why it's failing, you would need to examine more debug logs.