mirror of
https://github.com/fleetdm/fleet
synced 2026-05-17 14:08:25 +00:00
5ec4fab440
#9132 The actual fix for the empty hosts is adding the `--database_path` argument in the initial `osqueryd -S` invocation when retrieving the UUID. Osquery attempts to retrieve the UUID from OS files/APIs, when not possible (which is what happens on some linux distributions), then it resorts to generating a new random UUID and storing it in the `osquery.db`. The issue was Orbit's first invocation of `osqueryd -S` was not using the same `osquery.db` as the main daemon invocation of `osqueryd`. I'm also adding a `hostname` + `platform` to the orbit enroll phase so that if there are any issues in the future we can avoid the "empty" host and have some information to help us troubleshoot. ## How to reproduce On Linux, osquery reads `/sys/class/dmi/id/product_uuid` to load the hardware UUID. Some Linux distributions running on specific hardware or container environments do not have such file available. The way to reproduce on a Linux VM is to do the following: ```sh $ sudo su # chmod -r /sys/class/dmi/id/product_uuid ``` which will turn the file inaccessible to root. ## Checklist - [X] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or docs/Contributing/API-for-contributors.md)~ - ~[ ] Documented any permissions changes~ - [X] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements) - [X] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features. - [X] Added/updated tests - [x] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [x] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [x] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)). |
||
|---|---|---|
| .. | ||
| .keep | ||
| 6441-duplicated-fleet-desktop-bis | ||
| 6581-remote-flags-management | ||
| 7517-token-rotation | ||
| 8373-fix-desktop-free-spam | ||
| 8485-dump-pprof | ||
| 8901-augeas-lenses | ||
| 9132-orbit-enroll-set-osquery-db-to-retrieve-uuid | ||
| 9239-cis-2.3.2.2 | ||
| 9253-add-fleetd-table-pmset | ||
| 9260-add-authdb-table | ||
| 9260-add-dscl-table-cis-5.6 | ||
| 9260-add-firmware_eficheck_integity_check-table | ||
| 9260-add-sudo_info-table-cis-5.X | ||
| 9310-new-mdm-bridge-osquery-table | ||
| 9459-read-config | ||
| 10044-orbit-hang | ||
| 10300-symlink-not-present-quirk | ||
| add-retries-bootstrap-mdm-push | ||
| bug-3563-uninstall-does-not-remove-files | ||
| bug-6479-store-proxy-cert-at-secure-location | ||
| bug-6935-cannot-run-orbit-shell-on-windows | ||
| bug-7874-call-scm-on-service-start | ||
| bug-8009-fleet-desktop-duplicated-icon | ||
| bug-8974-smbios-uuid-value-retrieval | ||
| bug-9053-update-symlink-on-change | ||
| bug-9157-secret-orbit-node-file-is-world-accessible | ||
| bug-orbit-restart-empty-flags | ||
| icloud-private-relay | ||
| issue-9278-orbit-renew-enrollment-profile | ||
| issue-9347-kickstart-softwareupdated | ||
| issue-9550-default-carver-block-size | ||
| orbit-extensions-autoupdate | ||
| orbit-extensions-csrutil_info | ||
| orbit-extensions-nvram-info | ||
| orbit-extensions-pwd-policy | ||
| orbit-extensions-user-login-settings | ||
| remove-desktop-errors-tooltip | ||
| retry-enroll-on-unauth-error | ||
| windows-theme-detection | ||