Tag: Munki

Create a Munki installs array for multiple files at once

Munki uses several different methods to decide what needs to be installed on a Mac. When deploying applications or files, an “installs” array is, in my opinion, the best way to make sure they remain installed and unaltered.

Munki automatically creates an installs array when you import an application or a DMG containing an application. But when you import a package, by default the receipts are used to determine installation status.

This means to have Munki check for the existence of items deployed by a package and not rely on the receipts, an installs array must be manually constructed.

Creating an installs array for multiple files can be tedious, so I wrote a script to simplify the process. Read on the for the details.

Continue reading

Touch ID for sudo on macOS

Apple added the ability to use Touch ID for sudo on the command line interface back in 2017 with High Sierra.

Since that time there have been numerous scripts published to make enabling this feature easier.

So with apologies to the United States Marine Corps

This is my script. There are many like it, but this one is mine.

Read on for the details.

Continue reading

Deploying Photo Mechanic with Munki

Earlier this year Camera Bits consolidated the different Photo Mechanic (PM) versions into a single “All-in-One” download.

The cataloging feature of Photo Mechanic Plus is now simply activated (or not) by the license used to activate the application. (This is exactly how Microsoft handles Office for Mac.)

There are now subscriptions as well as perpetual licenses available which all use the same download.

Thankfully the ability to programmatically activate and deactivate is still there so only a few changes are needed in our Munki scripts.

Read on for the required changes…

Continue reading

Granting Munki Full Disk Access

MunkiMunki has been a staple management tool for many MacAdmins for a decade.

However in recent releases of macOS, Munki needs to be granted Privacy Preferences Policy Control permissions to access certain disk locations or update some apps.

Thankfully this has become very easy in the past year thanks to the MacAdmins community.

Read on for details and an example configuration profile.

Continue reading

Keyboard Setup Assistant, YubiKeys and a Munki NoPkg

We are always looking for ways to reduce friction for end users. Our job in IT is to empower users to get their work done with as few technological distractions as possible.

Many times Apple makes this harder due to features or functionality in macOS. One such example is Keyboard Setup Assistant (KSA) which automatically launches anytime a new input device is detected.

While this is very helpful for consumers who have purchased a new peripheral; in a corporate setting it can be an annoyance multiplied thousands of times over.

YubiKeys present to macOS as keyboards and trigger KSA. When rolling them out we decided to use a Munki NoPkg to save our co-workers from having to dismiss this useless dialog.

Read on for the details…

Continue reading

MunkiReport, Python 3 and PHP 8

MunkiReport 5.8 was released today and primarily includes compatibility with Python 3 and PHP 8.

Just like last year’s release of 5.7, this new version of MunkiReport requires admins to deploy a specific Python package to clients before updating.

It will also likely require a coordinated update on your web server to enable PHP 8.

Read on for the details…

Continue reading

Gather logs with a Munki NoPkg

CREDIT: flaticon.com

Troubleshooting with remote users can often be a challenge.

This is especially true when you need to see logs stored in hidden folders that users can’t easily find.

To make this process easier for both IT and our staff we added a Self-Service item to Managed Software Center to easily gather everything we need.

Read on for the details…

Continue reading

AWS VPN diagnostics with a Munki NoPkg

Troubleshooting VPN issues can be tricky for end users.

When we started to see recurring issues with AWS VPN, our Cloud team asked us to make it easier to gather logs and run diagnostics.

We already utilize Managed Software Center for Self-Service so a Munki NoPkg was the logical solution.

The result is a script that gathers all the requested information and makes it easy for users to share with just one click.

Read on for the details…

Continue reading

Enabling macOS betas with a Munki NoPkg

Apple changed the process for enrolling in macOS beta seeds beginning with 13.4 released in May 2023.

What could previously be automated via the seedutil command line tool now requires user interaction.

Thankfully we can still use Managed Software Center to make this process easier for users.

Read on for the details…

Continue reading

Uninstalling Workspace ONE Intelligent Hub with Munki

A very annoying bug in the latest release of Workspace ONE Intelligent Hub caused us to uninstall it from our macOS fleet using Munki.

Last week VMware released version 23.04.0 and the users in our testing group were immediately bombarded with a confusing error dialog. These errors would appear repeatedly throughout the day and worst of all, steal focus every time.

We halted the rollout and immediately engaged VMware support who confirmed the issue isn’t isolated to our tenant. Multiple customers are experiencing the bug including others in the #workspaceone channel on the MacAdmins Slack.

However despite pulling 24.04 from Munki and making sure automatic updates were disabled in our WS1 console, the install count continued to climb. With no resolution in sight from VMware we decided to remove 24.04 from our fleet completely.

So much for Read-Only Friday! Read on for the details…

Continue reading