Postflight will run on the unbooted system, whereas first boot is how you alter stuff you wouldn’t have access to otherwise. I enjoy putting as much into payload-free packages with postflight scripts to do my bidding, and therefore have as close to a zero-touch deployment as possible(especially when combined with deploystudio, puppet, and or munki). But sometimes you should follow best practices and not hack stuff into the unbooted box so data is modified to your liking with the near-native binaries/apps that are supposed to be modifying them. And there’s plenty of times you have no choice because what you’re trying to do doesn’t behave in a unbooted environment.
Pardon me if I’m just rambling… Allister
Comments are closed