# osquery office hours 2023-01-03

YouTube Link: https://youtu.be/8-VZj5eCX7Q

## Announcements and Highlights since the last meeting

## Any Questions / Issues / PRs people want to discuss?

The intent of this section is to provide a clear time for community members to bring up _anything_.

Broad questions? Bugs? Deployment questions? Blocked PRs?

## Agenda down here

## How's testing 5.7.0

Looks okay in the Kolide and FleetDM fleets.

5.7.0 is stable. We'll click some things.

## Dropping centos 6

https://github.com/osquery/osquery/issues/7445

Stefano proposes that we'll move the library configs to centos7 for the _next_ batch of library updates.

This does _not_ move the toolchain from centos6. The toolchain will still target the centos6 glibc.

During this transitional state the libraries will use the centos6 glibc, but a centos7 kernel.

Eventually, everything will be moved to centos7

Last time we talked about this, Microsoft mentioned they had customers using centos 6. But it's a been a
year. Discussing some possible routes, if they ask:
* There are probablty people (ToB) who can be paid to backport/maintain osquery on centos 6
* But if they're going to pay ToB, should that work happen under the osquery umbrella?
* Alessandro thinks _not_. It being in the community version implies deeper support
* They can also just use whatever the last version that worked was
* Or cherry pick for themselves

How do we message this?

## ARM / AWS / ci

Part of the ci stack uses a repo Teddy owns. We should move that. (This is the github action https://github.com/theopolis/ec2-github-runner)

The images those CI machines use are also getting too old. They're using ami `ami-063d99d9ce1bebbe8`, and we don't know where that came from. It's ubuntu 16 based, it may vanish someday.

This is one of the unloved corners. GitHub doesn't support arm64 (still) so that leaves us needing to either move vendors, or keep cobbling things together.

## Look At Open CVS / Security Tickets

[List of Issues tagged with Security](https://github.com/osquery/osquery/issues?q=is%3Aopen+is%3Aissue+label%3Asecurity)

Nothing new than than 3 weeks

## Look at old PRs

_(If there's time, we've been trying to re-visit old PRs)_

[Reverse Sorted List of PRs](https://github.com/osquery/osquery/pulls?q=is%3Apr+is%3Aopen+sort%3Acreated-asc)