Archive for category: Management

Hook The Lintings

Friends don’t let friends commit puppet code with obvious errors. Especially when you’re working with a team, having a consistent style enforced by something like puppet-lint means less messy diffs as you send changes to each other to review. And if you’re leveraging stuff like r10k, you definitely don’t want […]

Read more

Skipping Network Setup in SetupAssistant

SetupAssistant.app has many fun hidden dot files in /var/db/ and Pepijn Bruienne (@bruienne) has found another good one: /var/db/.MBSkipWiFiSetupIfPossible This dot file will make SetupAssistant skip the WiFi setup portion of the setup in some cases. Only 10.11 and higher will respect this dot file. For SetupAssistant to skip the […]

Read more

Congratulations to JAMF Software!

We at AFP548 would like to congratulate JAMF Software and IBM for their announced collaboration to provide management services to Apple customers all around the world. In one fell swoop, one of the oldest technology companies showed it was serious about supporting Apple’s products, and here’s to the notion that […]

Read more

Stop Remediating While you Audit

Stop Remediating While you Audit

Let’s talk about orchestration. This term is different than just applying the normal set of configuration profiles you want near-permanently enforced on the workstations under your management. Too much theory isn’t necessarily helpful, but sometimes I come across something that feels right, and then experience validates it as a real, […]

Read more

Enhancing Sal with Facter and Profiles

In a previous post, I showed how to set up Sal. Sal‘s basic functionality is useful on its own, for the basic Munki reporting – what are the completed installs, pending updates, what OS versions, how many devices checked in the past 24 hours, etc. In this post, I’m going […]

Read more

Building Munki with Puppet for SSL Client Certificates

Note: this is based on the README for the Munki-SSL docker container. In a previous post, we ran a Docker container serving Munki repo content via Nginx. That works fine, but only serves insecure HTTP content. It’s generally in everyone’s best interest to use a secure connection between the Munki […]

Read more

Building a Puppetmaster with Docker

This is based on the README I wrote for the macadmins/puppetmaster image. Puppet is an industrial-strength cross-platform configuration management engine. Though you’ll find lots of existing Puppetmaster images on the Docker registry, this one will serve as the baseline for other expanded uses of Puppet – such as using it […]

Read more

When Yosemite has Fallen, and it Can’t Get Up

When Yosemite has Fallen, and it Can’t Get Up

UPDATE January 20, 2015 – Some are reporting an opendirectoryd-related fix, featuring the very cool-looking darwinup. Let’s hope it makes it into .2, and we’re not all chomping at the bit for 10.10.3! People are noticing a symptom, branded LoginLockout (credit @andrewrose), where Yosemite seemingly freezes during startup. The keyboard shows […]

Read more

Patchoo! Casper patching done right.

Patchoo! Casper patching done right.

  Patchoo is here and aims to bring some Munki-esque features and workflow to Casper. We all know that Casper has some gaps around patch deployment. Whilst Casper 9 somewhat improves capabilities there is still no cohesive way for an end user to install 3rd party and Apple Software Updates. Munki does […]

Read more

Exploring Apple’s new Device Enrollment Program

Exploring Apple’s new Device Enrollment Program

On February 26, 2014 Apple announced its new Device Enrollment Program (DEP). You can read about the features of the DEP here. In a nutshell, for US customers who have purchased devices directly from Apple, you can: 1) Force enrollment with your MDM when device is set up (every time) […]

Read more