v1.1.0
1.1.0 is focused on improving initial start up reliability. There are many small changes and tweaks in how launcher and osquery startup work together.
Additionally, 1.1.0 brings in callback support for the localserver
interface.
Table Changes
- Add error output to internal dev table exec calls by @zackattack01 in #1323
- Add table for CarbonBlack repcli output by @zackattack01 in #1318
- Remove
kolide_airdrop_preferences
table by @zackattack01 in #1348
General
- Ensure panic is logged fully by @RebeccaMahany in #1309
- Fix log caller by @James-Pickett in #1299
- [Control] Add support for general launcher actions by @James-Pickett in #1250
- [Flare] Add checkup for gnome extensions by @directionless in #1328
- [Flare] Add more flare data by @directionless in #1329
- [Flare] Flares for osquery by @RebeccaMahany in #1293
- [Flare] Remove noisy log + prevent panic after parse by @RebeccaMahany in #1291
- [Flare] add quarantine check to scan for quarantine files and meddlesome processes by @James-Pickett in #1333
- [Flare] add system time flare check by @James-Pickett in #1340
- [Flare] adds launcher flags to flare by @James-Pickett in #1302
- [Localserver] Add callback support to
kryptoEcMiddleware
by @directionless in #1303 - [Osquery Startup] Add an interrupt routine to log checkpoint by @directionless in #1341
- [Osquery Startup] Add logging to the rungroup by @RebeccaMahany in #1316
- [Osquery Startup] Allow desktop runner Interrupt to be called multiple times by @RebeccaMahany in #1344
- [Osquery Startup] Allow runner.Shutdown to be called more than once by @RebeccaMahany in #1354
- [Osquery Startup] The osquery healthcheck startup delay should not block extension shutdown by @RebeccaMahany in #1351
- [Osquery Startup] Use rungroup in desktop; log all desktop logs at debug level by @RebeccaMahany in #1332
- [Osquery Startup] Run and log
osquery --version
immediately on launcher startup by @RebeccaMahany in #1307 - [Rungroups] Add flag to delay initial osquery healthchecks; set opts on instance after restart by @RebeccaMahany in #1294
- [Rungroups] Reduce osquery socket usage in localserver, reducing early socket contention by @zackattack01 in #1359
- [Rungroups] Toggle osquery verbose flag on startup by @RebeccaMahany in #1324
- [Rungroups] get build prefix for upgrade table from sysctl instead of osquery by @zackattack01 in #1347
- [Rungroups] remove unused osquery client from all table/plugin method signatures by @zackattack01 in #1350
- [TUF autoupdater] Add to legacy autoupdater initial delay to stagger legacy+new autoupdaters by @RebeccaMahany in #1337
- [TUF autoupdater] Bump lookup logs up to Info level by @RebeccaMahany in #1355
- [TUF autoupdater] Check err != nil first in
checkExecutablePermissions
by @RebeccaMahany in #1335 - [TUF autoupdater] Create a temp staging dir per-download by @RebeccaMahany in #1306
- [TUF autoupdater] Devices on nightly channel use new autoupdate library by @RebeccaMahany in #1268
- [TUF autoupdater] Don't make temp staging dir inside OS temp dir by @RebeccaMahany in #1339
- [TUF autoupdater] Don't perform library lookup for desktop process by @RebeccaMahany in #1357
- [TUF autoupdater] Don't perform unnecessary restarts when not using new autoupdater by @RebeccaMahany in #1331
- [TUF autoupdater] Don't permanently swap prerelease value by @RebeccaMahany in #1356
- [TUF autoupdater] Don't use new autoupdater yet; don't set env var by @RebeccaMahany in #1362
- [TUF autoupdater] Find correct update directory for osqueryd by @RebeccaMahany in #1349
- [TUF autoupdater] Fix prerelease sorting by @RebeccaMahany in #1353
- [TUF autoupdater] Small cleanup for initial TUF rollout by @RebeccaMahany in #1305
- [TUF autoupdater] Update checkExecutablePermissions to check for non-os.IsNotExist errors first by @RebeccaMahany in #1314
Build and Package
- Bump kolide/toast to 1.0.2 by @RebeccaMahany in #1298
- Bump kolide/toast to v1.0.1 by @RebeccaMahany in #1290
- Fix tools for go 1.21 by @directionless in #1304
- Update GitHub Actions to support GitHub merge queues by @directionless in #1336
- [Testing] Allow parsing to be off by one second in test by @RebeccaMahany in #1308
- [Testing] If we can't start command in test, return err immediately by @RebeccaMahany in #1319
- [Testing] Make flaky test less flaky by @RebeccaMahany in #1292
Full Changelog: v1.0.15...v1.1.0