# 使用 Homebrew 安装 osctrl-cli

查看 osctrl-cli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:osctrl-cli
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install osctrl-cli
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:osctrl-cli
- **软件包管理器:** Homebrew
- **版本:** 0.5.4
- **来源摘要:** Fast and efficient osquery management
- **主页:** <https://osctrl.net>
- **仓库:** <https://github.com/jmpsec/osctrl>
- **最后更新:** 2026-07-27T23:46:53+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- osctrl-cli (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.5.4
## 项目历史与用法

osctrl-cli is the operator CLI for osctrl, a Go-based osquery management platform. osctrl implements osquery's remote API as a TLS endpoint and includes services for enrollment, configuration distribution, log collection, on-demand queries, file carving, an API, web UI, and CLI automation.

### 项目历史

GitHub records jmpsec/osctrl as created on 2018-12-17. The project grew as a fleet-management layer for osquery, with osctrl-cli living alongside osctrl-tls, osctrl-admin, and osctrl-api as one of the built components.

Release notes show continued operational hardening: v0.4.9 introduced a breaking move to a single YAML configuration file, v0.5.0 included osctrl-cli and API fixes plus security policy work, and v0.5.3 shipped osctrl-cli binary packages among its release assets. The README also labels the old server-rendered osctrl-admin interface as legacy and presents the newer frontend as the primary operator UI.

### 采用历史

The README says osctrl is used in production environments while still under active development, and claims scalability from hundreds to hundreds of thousands of nodes. Public evidence points to a specialized endpoint-security audience rather than mass-market adoption: osquery operators, incident-response teams, and security engineers who need fleet visibility and remote querying.

### 使用方式

The osctrl-cli documentation says its purpose is to execute actions in osctrl without directly accessing the backend or using the admin interface, making it useful for scripts and automation. In the repository architecture, operators and automation can talk through osctrl-cli to the API, while some modes can work directly with the database.

Operators use the broader osctrl system to enroll osquery agents, distribute configuration, collect status and result logs, run on-demand queries, and carve files. osctrl-cli is the package-friendly command-line entry point for those actions.

### 为什么软件包爱好者会关心

osctrl-cli matters because it packages a security-operations control plane into installable binaries and Debian packages. For package nerds, it is a reminder that some CLIs are not standalone products; they are automation handles for a larger service suite with databases, TLS endpoints, log sinks, and web frontends.

### 时间线

- 2018-12-17: GitHub repository created.
- 2025-12-24: v0.4.9 release introduced a breaking single-YAML configuration change.
- 2026-02-24: v0.5.0 release included osctrl-cli/API fixes and security policy work.
- 2026-06-12: v0.5.3 release published osctrl-cli Debian package assets for Linux amd64 and arm64.

### Related projects

- osquery is the endpoint agent and query engine that osctrl manages. osctrl-tls implements the remote API endpoint, osctrl-api exposes REST automation, osctrl-admin and the frontend provide UI surfaces, and osctrl-cli is the command-line automation surface.

### 来源

- <https://api.github.com/repos/jmpsec/osctrl>
- <https://api.github.com/repos/jmpsec/osctrl/releases>
- <https://formulae.brew.sh/formula/osctrl-cli>
- <https://github.com/jmpsec/osctrl>
- <https://osctrl.net/>
- <https://osctrl.net/usage/osctrl-cli/>
- <https://osquery.readthedocs.io/en/stable/deployment/remote/>
- <https://raw.githubusercontent.com/jmpsec/osctrl/develop/README.md>


## 安全说明

没有找到 osctrl-cli 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: osctrl-api.json

## Credential files

- Unix: osctrl-api.json

## Combined YAML source

View the package source record on GitHub. [combined/osctrl-cli.yml](https://github.com/mxcl/pkgdb/blob/main/combined/osctrl-cli.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph
