无法在 Ubuntu 15 上启动 osquery:
我在日志中发现了这一点:
● osqueryd.service - LSB: run osqueryd daemon Loaded: loaded
(/etc/init.d/osqueryd) Active: failed (Result: exit-code) since Tue
2015-08-18 05:15:09 UTC; 8s ago
Docs: man:systemd-sysv-generator(8) Process: 27710 ExecStart=/etc/init.d/osqueryd start (code=exited, status=127)
Aug 18 05:15:09 public-server-01 systemd[1]: Starting LSB: run osqueryd daemon...
Aug 18 05:15:09 public-server-01 osqueryd[27710]: osqueryd: error while loading shared libraries: libgcrypt.so.11: cannot open shared object file: No such file or directory
Aug 18 05:15:09 public-server-01 systemd[1]: osqueryd.service: control process exited, code=exited status=127
Aug 18 05:15:09 public-server-01 systemd[1]: Failed to start LSB: run osqueryd daemon.
Aug 18 05:15:09 public-server-01 systemd[1]: Unit osqueryd.service entered failed state.
Aug 18 05:15:09 public-server-01 systemd[1]: osqueryd.service failed.
我是这样安装的:
dpkg -i osquery-latest.deb
apt-get install osquery
那么它为什么没有启动呢?
答案1
关键错误就在这里
Aug 18 05:15:09 public-server-01 osqueryd[27710]: osqueryd: error while loading shared libraries: libgcrypt.so.11: cannot open shared object file: No such file or directory
看起来你错过了libgcrypt.so.11
看起来像是 14.04 并且在 15 中不可用。从阅读看来你可以安装 14.04 版本。