Should we relocate /private/var under /opt/osquery

[Smjert]

It has been raised a question about why we are not relocating /private/var contents under /opt/osquery. This is to track such discussion if needed.

[Smjert]

The only comment I have is: what is the reasoning?
Also, lets remember that this change requires going over all the code that expects by default that configs, lenses, packs etc are by default there (might be an easy thing, but just to keep it in mind).

[directionless]

I'll start by saying that I don't think this is a very end user visible issue. And as such, I don't think changing it would be a breaking release. (Yeah, it's a little irksome, but it seems fine?)

So my general read on things like /opt/ are they an application should be pretty self contained there. I'd expect a vendor package to drop anything that looked like an installation file into /opt/whatev, but probably still use /var for runtime info (like databases, logs, and pid files). I think lenses fit much closer to either installation things (belongs in /opt) or configuration (belongs in /etc).

I think the linux FHS generally agrees. But I'm not sure anyone really pays any attention to it