Archive for category: Management

Stop Remediating While you Audit

Stop Remediating While you Audit

Let’s talk about orchestration. This term is different than just applying the normal set of configuration profiles you want near-permanently enforced on the workstations under your management. Too much theory isn’t necessarily helpful, but sometimes I come across something that feels right, and then experience validates it as a real, […]

Read more

Enhancing Sal with Facter and Profiles

In a previous post, I showed how to set up Sal. Sal‘s basic functionality is useful on its own, for the basic Munki reporting – what are the completed installs, pending updates, what OS versions, how many devices checked in the past 24 hours, etc. In this post, I’m going […]

Read more

Building Munki with Puppet for SSL Client Certificates

Note: this is based on the README for the Munki-SSL docker container. In a previous post, we ran a Docker container serving Munki repo content via Nginx. That works fine, but only serves insecure HTTP content. It’s generally in everyone’s best interest to use a secure connection between the Munki […]

Read more

Building a Puppetmaster with Docker

This is based on the README I wrote for the macadmins/puppetmaster image. Puppet is an industrial-strength cross-platform configuration management engine. Though you’ll find lots of existing Puppetmaster images on the Docker registry, this one will serve as the baseline for other expanded uses of Puppet – such as using it […]

Read more

When Yosemite has Fallen, and it Can’t Get Up

When Yosemite has Fallen, and it Can’t Get Up

UPDATE January 20, 2015 – Some are reporting an opendirectoryd-related fix, featuring the very cool-looking darwinup. Let’s hope it makes it into .2, and we’re not all chomping at the bit for 10.10.3! People are noticing a symptom, branded LoginLockout (credit @andrewrose), where Yosemite seemingly freezes during startup. The keyboard shows […]

Read more

Patchoo! Casper patching done right.

Patchoo! Casper patching done right.

  Patchoo is here and aims to bring some Munki-esque features and workflow to Casper. We all know that Casper has some gaps around patch deployment. Whilst Casper 9 somewhat improves capabilities there is still no cohesive way for an end user to install 3rd party and Apple Software Updates. Munki does […]

Read more

Exploring Apple’s new Device Enrollment Program

Exploring Apple’s new Device Enrollment Program

On February 26, 2014 Apple announced its new Device Enrollment Program (DEP). You can read about the features of the DEP here. In a nutshell, for US customers who have purchased devices directly from Apple, you can: 1) Force enrollment with your MDM when device is set up (every time) […]

Read more

Calling all ears! AFP548 has a podcast!

Calling all ears! AFP548 has a podcast!

AFP548 has always been about community: like-minded folks found their way to the Apple platform, and some of us even made a career out of supporting “Enterprise at your own risk”(copyright Nate Walck.) After Jody Rodgers got wind of a skunkworks project operating under the pseudonym ‘The Cylinder of Destiny,’ […]

Read more

Changes in Apple Configurator 1.3

Changes in Apple Configurator 1.3

Apple Configurator was updated to version 1.3 on June 18, 2013. With the new update, some new features were added, some old features returned, and some things have changed. UPDATE: back ups are NOT encrypted… Sorry folks! I had erroneously said that back ups were now encrypted. They are not. […]

Read more

OS X Configuration Profiles review and gotchas: compositing not included?

OS X Configuration Profiles review and gotchas: compositing not included?

One of the issues Mac admins have with OS X’s Configuration Profiles system is that using OS X Server to build a Profile allows only subset of the management “scope” that is provided using MCX / Managed Preferences. Specifically, any configuration profiles made with Profile Manager are the equivalent of […]

Read more