-
Notifications
You must be signed in to change notification settings - Fork 0
/
1. DepNotify with User Input.sh
146 lines (120 loc) · 7.2 KB
/
1. DepNotify with User Input.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
#!/bin/bash
# $4 = JSS URL
# $5 = JSS account username for API access
# $6 = JSS account password for API access
# Set basic variables
osversion=$(sw_vers -productVersion)
serial=$(ioreg -rd1 -c IOPlatformExpertDevice | awk -F'"' '/IOPlatformSerialNumber/{print $4}')
# Let's not go to sleep
caffeinate -d -i -m -s -u &
caffeinatepid=$!
# Disable Software Updates during imaging
softwareupdate --schedule off
dockStatus=$(pgrep -x Dock)
while [[ "$dockStatus" == "" ]]; do
sleep 5
dockStatus=$(pgrep -x Dock)
done
# Get the currently logged in user's username
loggedInUser=$(python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\n");')
# Check for existing Hostname extension attribute in JSS - if it's not there, we'll ask for the name and role, otherwise, automation baby!
eaxml=$(curl "$4":8443/JSSResource/computers/serialnumber/"$serial"/subset/extension_attributes -u "$5":"$6" -H "Accept: text/xml")
jssHostName=$(echo "$eaxml" | xpath '//extension_attribute[name="Hostname"' | awk -F'<value>|</value>' '{print $2}')
jssComputerRole=$(echo "$eaxml" | xpath '//extension_attribute[name="Computer Role"' | awk -F'<value>|</value>' '{print $2}')
if [[ "$jssHostName" == "" ]] || [[ "$jssComputerRole" == "" ]]; then
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify PathToPlistFile /var/tmp/
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify RegisterMainTitle "Let's get started..."
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify RegistrationButtonLabel OK
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify UITextFieldUpperPlaceholder "HAW12345"
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify UITextFieldUpperLabel "Computer Name"
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify UIPopUpMenuUpper -array "Staff" "Labs" "Shared" "Loaner"
sudo -u "$loggedInUser" defaults write menu.nomad.DEPNotify UIPopUpMenuUpperLabel "Computer Role"
echo "Command: ContinueButtonRegister: Continue" >> /var/tmp/depnotify.log
echo "Command: Image: "/private/var/tmp/swinburne-university-of-technology-logo.png"" >> /var/tmp/depnotify.log
echo 'Command: MainTitle: Hi there!' >> /var/tmp/depnotify.log
echo "Command: MainText: It's time to set up this Mac with the software and settings it needs. Before we continue, please make sure it is plugged into a wired network connection on campus. \n \n If you need any assistance, please contact the Swinburne Service Desk. \n \n Telephone: 9214 5000 \n Email: servicedesk@swin.edu.au" >> /var/tmp/depnotify.log
echo "Status: Please set the computer name and role to continue..." >> /var/tmp/depnotify.log
sudo -u "$loggedInUser" /Applications/Utilities/DEPNotify.app/Contents/MacOS/DEPNotify -jamf -fullScreen &
sleep 1
# Wait for the user data to be submitted...
while [ ! -f /var/tmp/DEPNotify.plist ]; do
echo "Status: Please set the computer name and role to continue..." >> /var/tmp/depnotify.log
sleep 5
done
# Let's read the user data into some variables...
computerName=$(/usr/libexec/plistbuddy /var/tmp/DEPNotify.plist -c "print 'Computer Name'")
computerRole=$(/usr/libexec/plistbuddy /var/tmp/DEPNotify.plist -c "print 'Computer Role'")
# Update Hostname and Computer Role in JSS
# Create xml
cat << EOF > /var/tmp/name.xml
<computer>
<extension_attributes>
<extension_attribute>
<name>Hostname</name>
<value>$computerName</value>
</extension_attribute>
</extension_attributes>
</computer>
EOF
## Upload the xml file
/usr/bin/curl -sfku "$5":"$6" "$4":8443/JSSResource/computers/serialnumber/"$serial" -H "Content-type: text/xml" -T /var/tmp/name.xml -X PUT
# Create xml
cat << EOF > /var/tmp/role.xml
<computer>
<extension_attributes>
<extension_attribute>
<name>Computer Role</name>
<value>$computerRole</value>
</extension_attribute>
</extension_attributes>
</computer>
EOF
## Upload the xml file
/usr/bin/curl -sfku "$5":"$6" "$4":8443/JSSResource/computers/serialnumber/"$serial" -H "Content-type: text/xml" -T /var/tmp/role.xml -X PUT
else
# Set variables for Computer Name and Role to those from the JSS
computerName="$jssHostName"
computerRole="$jssComputerRole"
# Launch DEPNotify
echo "Command: Image: "/var/tmp/swinburne-university-of-technology-logo.png"" >> /var/tmp/depnotify.log
echo "Command: MainTitle: Setting things up..." >> /var/tmp/depnotify.log
if [[ $computerRole == "Labs" ]]; then
echo "Command: MainText: Please wait while we set this Mac up with the software and settings it needs. This may take a few hours. We'll restart automatically when we're finished. \n \n Role: "$computerRole" Mac \n Computer Name: "$computerName" \n macOS Version: "$osversion"" >> /var/tmp/depnotify.log
else
echo "Command: MainText: Please wait while we set this Mac up with the software and settings it needs. This may take up to 20 minutes. We'll restart automatically when we're finished. \n \n Role: "$computerRole" Mac \n Computer Name: "$computerName" \n macOS Version: "$osversion"" >> /var/tmp/depnotify.log
fi
echo "Status: Please wait..." >> /var/tmp/depnotify.log
sudo -u "$loggedInUser" /Applications/Utilities/DEPNotify.app/Contents/MacOS/DEPNotify -jamf -fullScreen &
fi
# Carry on with the setup...
# Change DEPNotify title and text...
echo "Command: MainTitle: Setting things up..." >> /var/tmp/depnotify.log
if [[ $computerRole == "Labs" ]]; then
echo "Command: MainText: Please wait while we set this Mac up with the software and settings it needs. This may take a few hours. We'll restart automatically when we're finished. \n \n Role: "$computerRole" Mac \n Computer Name: "$computerName" \n macOS Version: "$osversion"" >> /var/tmp/depnotify.log
else
echo "Command: MainText: Please wait while we set this Mac up with the software and settings it needs. This may take up to 20 minutes. We'll restart automatically when we're finished. \n \n Role: "$computerRole" Mac \n Computer Name: "$computerName" \n macOS Version: "$osversion"" >> /var/tmp/depnotify.log
fi
echo "Status: Please wait..." >> /var/tmp/depnotify.log
# Time to set the hostname...
echo "Status: Setting computer name" >> /var/tmp/depnotify.log
jamf setComputerName -name "${computerName}"
# Bind to AD
jamf policy -event dep-bindToAD
# Run software deployment policies based on smart group membership
jamf policy -event Deploy
# Finishing up
echo "Command: MainTitle: All done!" >> /var/tmp/depnotify.log
echo "Command: MainText: This Mac will restart shortly and you'll be able to log in. \n \n If you need any assistance, please contact the Swinburne Service Desk. \n \n Telephone: 9214 5000 \n Email: servicedesk@swin.edu.au" >> /var/tmp/depnotify.log
echo "Status: Restarting, please wait..." >> /var/tmp/depnotify.log
# Remove DEPNotify and the logs
rm -Rf /Applications/Utilities/DEPNotify.app
# Remove the autologin user password file so it doesn't login again
rm -Rf /etc/kcpassword
#Drop an Enrolment Complete Receipt into Shared User Folder
touch /Users/Shared/.Enrolled
jamf recon
kill "$caffeinatepid"
/sbin/shutdown -r +2 &
# Wait a few seconds
sleep 5
exit 0