Right now, the osqueryd binary uses the TPipe thrift transport class to communicate between the daemon and extensions (on Windows only). In order for extensions to work in Go, we need to the Go thrift instance to use a compatible TPipe implementation. A TPipe implementation doesn't currently exist in Go, so we will have to create it. Ideally, once it works, we will upstream it as well.
Right now, the osqueryd binary uses the
TPipe
thrift transport class to communicate between the daemon and extensions (on Windows only). In order for extensions to work in Go, we need to the Go thrift instance to use a compatibleTPipe
implementation. ATPipe
implementation doesn't currently exist in Go, so we will have to create it. Ideally, once it works, we will upstream it as well.Relevant Discussions
https://osquery.slack.com/archives/C0FHNQ2N6/p1496681569060902 https://kolide.slack.com/archives/C1WS15WAD/p1497308886933812