Tag: Munki

Munki scripts for CrowdStrike Falcon

      2 Comments on Munki scripts for CrowdStrike Falcon

Munki is designed to ensure a specific or newer version of an application is installed on a macOS computer. A job it excels at.

CrowdStrike Falcon does a great job of upgrading, and downgrading, itself. This includes the ability for admins to change their desired installed version across the fleet from the CrowdStrike console.

So how does a MacAdmin use Munki to deploy Falcon without disrupting the ability to change the installed version across the fleet on the fly?

Read on for details on how we handle it.

Continue reading →

Create a Munki installs array for multiple files at once

      No Comments on Create a Munki installs array for multiple files at once

Munki uses several different methods to decide what needs to be installed on a Mac. When deploying applications or files, an “installs” array is, in my opinion, the best way to make sure they remain installed and unaltered.

Munki automatically creates an installs array when you import an application or a DMG containing an application. But when you import a package, by default the receipts are used to determine installation status.

This means to have Munki check for the existence of items deployed by a package and not rely on the receipts, an installs array must be manually constructed.

Creating an installs array for multiple files can be tedious, so I wrote a script to simplify the process. Read on the for the details.

Continue reading →

Touch ID for sudo on macOS

      No Comments on Touch ID for sudo on macOS

Apple added the ability to use Touch ID for sudo on the command line interface back in 2017 with High Sierra.

Since that time there have been numerous scripts published to make enabling this feature easier.

So with apologies to the United States Marine Corps…

This is my script. There are many like it, but this one is mine.

Read on for the details.

Continue reading →

Deploying Photo Mechanic with Munki

      No Comments on Deploying Photo Mechanic with Munki

Earlier this year Camera Bits consolidated the different Photo Mechanic (PM) versions into a single “All-in-One” download.

The cataloging feature of Photo Mechanic Plus is now simply activated (or not) by the license used to activate the application. (This is exactly how Microsoft handles Office for Mac.)

There are now subscriptions as well as perpetual licenses available which all use the same download.

Thankfully the ability to programmatically activate and deactivate is still there so only a few changes are needed in our Munki scripts.

Read on for the required changes…

Continue reading →

Granting Munki Full Disk Access

      No Comments on Granting Munki Full Disk Access

MunkiMunki has been a staple management tool for many MacAdmins for a decade.

However in recent releases of macOS, Munki needs to be granted Privacy Preferences Policy Control permissions to access certain disk locations or update some apps.

Thankfully this has become very easy in the past year thanks to the MacAdmins community.

Read on for details and an example configuration profile.

Continue reading →

Keyboard Setup Assistant, YubiKeys and a Munki NoPkg

      No Comments on Keyboard Setup Assistant, YubiKeys and a Munki NoPkg

We are always looking for ways to reduce friction for end users. Our job in IT is to empower users to get their work done with as few technological distractions as possible.

Many times Apple makes this harder due to features or functionality in macOS. One such example is Keyboard Setup Assistant (KSA) which automatically launches anytime a new input device is detected.

While this is very helpful for consumers who have purchased a new peripheral; in a corporate setting it can be an annoyance multiplied thousands of times over.

YubiKeys present to macOS as keyboards and trigger KSA. When rolling them out we decided to use a Munki NoPkg to save our co-workers from having to dismiss this useless dialog.

Read on for the details…

Continue reading →

MunkiReport, Python 3 and PHP 8

      No Comments on MunkiReport, Python 3 and PHP 8

MunkiReport 5.8 was released today and primarily includes compatibility with Python 3 and PHP 8.

Just like last year’s release of 5.7, this new version of MunkiReport requires admins to deploy a specific Python package to clients before updating.

It will also likely require a coordinated update on your web server to enable PHP 8.

Read on for the details…

Continue reading →

Gather logs with a Munki NoPkg

      No Comments on Gather logs with a Munki NoPkg

CREDIT: flaticon.com

Troubleshooting with remote users can often be a challenge.

This is especially true when you need to see logs stored in hidden folders that users can’t easily find.

To make this process easier for both IT and our staff we added a Self-Service item to Managed Software Center to easily gather everything we need.

Read on for the details…

Continue reading →

AWS VPN diagnostics with a Munki NoPkg

      No Comments on AWS VPN diagnostics with a Munki NoPkg

Troubleshooting VPN issues can be tricky for end users.

When we started to see recurring issues with AWS VPN, our Cloud team asked us to make it easier to gather logs and run diagnostics.

We already utilize Managed Software Center for Self-Service so a Munki NoPkg was the logical solution.

The result is a script that gathers all the requested information and makes it easy for users to share with just one click.

Read on for the details…

Continue reading →

Enabling macOS betas with a Munki NoPkg

      No Comments on Enabling macOS betas with a Munki NoPkg

Apple changed the process for enrolling in macOS beta seeds beginning with 13.4 released in May 2023.

What could previously be automated via the seedutil command line tool now requires user interaction.

Thankfully we can still use Managed Software Center to make this process easier for users.

Read on for the details…

Continue reading →