osquery-go icon indicating copy to clipboard operation
osquery-go copied to clipboard

``osqueryd`` claims shutdown request failed when exiting from SIGINT

Open anshukla opened this issue 7 years ago • 2 comments

I've written a basic osquery table extension using osquery-go. I confirmed that osquery{d,i} can load the extension and query my table as intended. However, when I try to quit osquery with ctrl+C, I see from osquery:

I0729 08:43:05.621091 134004736 extensions.cpp:220] Extension UUID 7951 shutdown request failed

I run osqueryd with:

sudo ./osqueryd --pidfile=osquery.pid --database_path=osquery.db --verbose=true --config_plugin=filesystem --config_path=osquery_test.conf --logger_plugin=filesystem --allow_unsafe --extensions_autoload=extensions.load

Is this expected with the default behavior of Shutdown()? Should I be implementing this signal handling logic myself? I should clarify that the extension process does quit, but I am wondering if the error is avoidable.

anshukla avatar Jul 29 '18 15:07 anshukla

What version of osquery-go are you using? We made some changes recently that should have fixed this.

zwass avatar Jul 30 '18 18:07 zwass

I have tip of tree checked into vendor. Perhaps it's related, then, to this test failure? https://circleci.com/gh/kolide/osquery-go/240

anshukla avatar Jul 31 '18 14:07 anshukla