Installer osctrl-cli avec Homebrew

Liens du projet

• Page d'accueil
• Dépôt
• Docs amont
• Page du gestionnaire de paquets

Commandes et alias

• osctrl-cli

Historique du projet

GitHub records jmpsec/osctrl as created on 2018-12-17. The project grew as a fleet-management layer for osquery, with osctrl-cli living alongside osctrl-tls, osctrl-admin, and osctrl-api as one of the built components.

Release notes show continued operational hardening: v0.4.9 introduced a breaking move to a single YAML configuration file, v0.5.0 included osctrl-cli and API fixes plus security policy work, and v0.5.3 shipped osctrl-cli binary packages among its release assets. The README also labels the old server-rendered osctrl-admin interface as legacy and presents the newer frontend as the primary operator UI.

Historique d'adoption

The README says osctrl is used in production environments while still under active development, and claims scalability from hundreds to hundreds of thousands of nodes. Public evidence points to a specialized endpoint-security audience rather than mass-market adoption: osquery operators, incident-response teams, and security engineers who need fleet visibility and remote querying.

Modes d'utilisation

The osctrl-cli documentation says its purpose is to execute actions in osctrl without directly accessing the backend or using the admin interface, making it useful for scripts and automation. In the repository architecture, operators and automation can talk through osctrl-cli to the API, while some modes can work directly with the database.

Operators use the broader osctrl system to enroll osquery agents, distribute configuration, collect status and result logs, run on-demand queries, and carve files. osctrl-cli is the package-friendly command-line entry point for those actions.

Pourquoi les passionnés de paquets s'y intéressent

osctrl-cli matters because it packages a security-operations control plane into installable binaries and Debian packages. For package nerds, it is a reminder that some CLIs are not standalone products; they are automation handles for a larger service suite with databases, TLS endpoints, log sinks, and web frontends.

Chronologie

• 2018-12-17: GitHub repository created.
• 2025-12-24: v0.4.9 release introduced a breaking single-YAML configuration change.
• 2026-02-24: v0.5.0 release included osctrl-cli/API fixes and security policy work.
• 2026-06-12: v0.5.3 release published osctrl-cli Debian package assets for Linux amd64 and arm64.

Related projects

• osquery is the endpoint agent and query engine that osctrl manages. osctrl-tls implements the remote API endpoint, osctrl-api exposes REST automation, osctrl-admin and the frontend provide UI surfaces, and osctrl-cli is the command-line automation surface.

Sources

• https://api.github.com/repos/jmpsec/osctrl
• https://api.github.com/repos/jmpsec/osctrl/releases
• https://formulae.brew.sh/formula/osctrl-cli
• https://github.com/jmpsec/osctrl
• https://osctrl.net/
• https://osctrl.net/usage/osctrl-cli/
• https://osquery.readthedocs.io/en/stable/deployment/remote/
• https://raw.githubusercontent.com/jmpsec/osctrl/develop/README.md