What you’ve all been waiting for, the exciting conclusion to Charles interviewing Pepijn, where they finally let loose the dogs of Docker. Be sure to not listen all the way until the end, as the hand-egg talk somehow slipped in.

If you manage or administer devices with an Apple logo and are in Sydney on the 16th, you should come along to meet your peers. Take part in an informal chat and share what has and hasn’t been working for you and others. Find out what is new, what works […]

So it used to be we’d wait for machines that were bound to Active Directory running 10.10.0-10.10.2 to freeze during startup and we’d either perform CPR or apply rc.server script fixes. ‘Things can only get better,’ we said. ‘Just trust them,’ we said. ‘They’ll get it all fixed if we […]

It’s been a long-standing goal of mine to help people get started making their own recipes for autopkg, which was recently spurred on by revisiting my previously-discussed recipeGenerationUtils. The autopkg wiki can only be so instructive on the process besides some general guidelines, so I thought I’d expand on some points here, while […]

Once again donning the yellow jersey, Charles Edge returns to reverse-interview Pepijn Bruienne, recorded back at the turn of the year. We’re so happy to have Charles back with his new role at Bushel, mostly because we can finally drag out the ‘scrum masters’ tag again. Lovingly polished by the awesome Aaron Lippincott, […]

When we heard about the ‘bootkit’ exploit branded Thunderstrike having the potential to remove all of your security controls it was pretty disturbing. Luckily Apple controls a relatively small number of models, and released a patch for several affected CPU versions, bundling it with 10.10.2 so as to lessen the number […]

Let’s talk about orchestration. This term is different than just applying the normal set of configuration profiles you want near-permanently enforced on the workstations under your management. Too much theory isn’t necessarily helpful, but sometimes I come across something that feels right, and then experience validates it as a real, […]

In a previous post, I showed how to set up Sal. Sal‘s basic functionality is useful on its own, for the basic Munki reporting – what are the completed installs, pending updates, what OS versions, how many devices checked in the past 24 hours, etc. In this post, I’m going […]

In a previous post, I showed how to use Munki with Puppet SSL Client certificates in a Docker image. In that example, the Puppetmaster image is set to automatically sign all certificate requests. Good for testing, but not a good idea for production use. Instead, we should look into Puppet […]

Previously, I showed how you can run Munki in a Docker container. Then, I talked about how to build Munki to use Puppet for SSL certificates. Assuming you’ve got a running Puppetmaster image (which I talked about building here), let’s run the Munki-Puppet image we just built. Running the Container: […]