Skip to content

Releases: munki/munki

Munki 6.0 Beta 3

Compare
Choose a tag to compare
Munki 6.0 Beta 3 Pre-release
Pre-release

This is a beta release of Munki 6, a release adding new features to the Munki tools.

New features

  • Munki 6 adds a feature to stage a macOS installer application and have Managed Software Center launch it for a user, temporarily giving the user admin rights if needed. This enables Munki to assist with an upgrade of macOS on Apple silicon, but this feature can be used on Intel Macs as well.
  • munkiimport and makepkginfo now support a new --installer-type option, which can be used with disk images containing macOS installers to indicate whether you want to build a startosinstall item, a stage_os_installer item, or even a copy_from_dmg item (which would copy the installer to /Applications, and do nothing else).

Documentation

Work-in-progress documentation here: https://github.com/munki/munki/wiki/Munki-6-Information

Getting started with staged macOS installers

  • Use
    munkiimport --installer-type stage_os_installer /path/to/dmg/containing/Install\ macOS\ Foo.app or
    munkiimport --installer-type stage_os_installer /path/to/Install\ macOS\ Foo.app
    to generate a pkginfo supporting this new install mechanism (and import the installer). Optionally use --arch arm64 to limit this to Apple silicon.
  • Add the newly created item to a manifest for a testing machine.
  • Test!

Other changes in Munki 6.0

Changes from Beta 2:

  • Changes from Beta 2 are here: https://github.com/munki/munki/compare/v6.0.0b2..v6.0.0b3
    • Some highlights:
      • When Munki calls /usr/sbin/softwareupdate --list, the process is terminated if it has no output for five minutes.
      • munkiimport and makepkginfo's --arch option now errors if the option value is not one of 'i386', 'x86_64', 'arm64'
      • A fix for an issue where a user launching a macOS installer and then quitting it without installing would reset the tracking of how long the update had been available for install
      • UI/UX improvements when using a stage_os_installer item as an optional_install:
        • If the macOS installer is already available in the /Applications folder, you can still choose the item for install (previously it appeared as already installed)
        • MSC app will show the "_staged" display name and description if the optional_install stage_os_installer item is staged, but not yet installed
        • Improved behavior when there's a staged os update and pending Apple updates

Build info

The GUI apps and the Python framework were built under Xcode 13.4.1 on macOS 12.5.1. Other versions of Xcode have not been tested and may cause different results.

Package versioning

  • metapackage version: 6.0.0.4501
  • munki core tools version: 6.0.0.4501
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 6.0.0.4499
  • Python package version: 3.9.13.4481

Attachment info

munkitools-6.0.0.4501.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Munki 5.7.3 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.7.3, a bug-fix release of the Munki tools.

Known issues

  • Munki cannot yet do major OS upgrades on Apple silicon Macs.

Bug fixes

  • A fix for an issue where recently-released Mac laptops (M2 MacBook Air and M2 13" MacBook Pro) were not being identified as laptops. This fix should also work for future Mac laptops. Thanks to @jamesez (48632f3)
  • Fix make_munki_mpkg_from_git.sh option flags to match the changes in make_munki_mpkg.sh's option flags. Thanks to @poundbangbash (6b1d82f)
  • Better error reporting/logging: 5a8cca7 (Thanks to @danhutchings) and c2abd9a

Notification Center changes

Please see the release notes for the Munki 5.7 release (https://github.com/munki/munki/releases/tag/v5.7.0) for important information on changes in Notification Center notifications, and things an admin might need to do to react to these changes.

Other changes

A complete list of changes from the 5.7.2 release is here:
v5.7.2...v5.7.3

Build info

The GUI apps and the Python framework were built under Xcode 13.4.1 on macOS 12.5. Other versions of Xcode have not been tested and may cause different results.

Package versioning

  • metapackage version: 5.7.3.4444
  • munki core tools version: 5.7.3.4443
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.7.2.4439
  • Python package version: 3.9.13.4444

Attachment info

munkitools-5.7.3.4444.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Munki 5.7.2 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.7.2, a bug-fix release of the Munki tools.

Known issues

  • Munki cannot yet do major OS upgrades on Apple silicon Macs.

Bug fixes

  • Managed Software Center app: Fix for visible separator line under the titlebar/toolbar on Catalina and earlier. Thanks to @chrisgrande 42334f6
  • Fix for unhandled exception when running repoclean on Linux. Thanks to @forvitinn 4748ed7
  • Some fixes to react to changes in the beta of macOS Ventura: d834d45 516f4ec

Notification Center changes

Please see the release notes for the Munki 5.7 release (https://github.com/munki/munki/releases/tag/v5.7.0) for important information on changes in Notification Center notifications, and things an admin might need to do to react to these changes.

Other changes

A complete list of changes is here:
v5.7.1...v5.7.2

Build info

The GUI apps and the Python framework were built under Xcode 13.4.1 on macOS 12.4. Earlier (and later!) versions of Xcode have not been tested and may or may not have issues.

Package versioning

  • metapackage version: 5.7.2.4439
  • munki core tools version: 5.7.2.4438
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.7.2.4439
  • Python package version: 3.9.13.4424

Attachment info

munkitools-5.7.2.4439.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Munki 5.7.1 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.7.1, a bug-fix release of the Munki tools.

Known issues

  • Munki cannot yet do major OS upgrades on Apple silicon Macs.
  • Managed Software Center has a visual issue under Catalina and earlier: a thin separator line appears between the "title bar" and "content" areas of the window. (This is not an issue new to this release. I am not actively working on this issue; this would be an excellent opportunity for someone to contribute a fix.)

Bug fixes

  • Changes in how the list of available Apple software updates is generated on Big Sur+ and on Apple silicon, with the goal of making the list more reliable/accurate (and working around bugs in Apple's softwareupdate tool). d353d56

Notification Center changes

Please see the release notes for the Munki 5.7 release (https://github.com/munki/munki/releases/tag/v5.7.0) for important information on changes in Notification Center notifications, and things an admin might need to do to react to these changes.

Other changes

A complete list of changes is here:
v5.7.0...v5.7.1

Build info

The GUI apps and the Python framework were built under Xcode 13.3.1 on macOS 12.4. Earlier versions of Xcode have not been tested and may or may not have issues.

Package versioning

  • metapackage version: 5.7.1.4434
  • munki core tools version: 5.7.1.4434
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.6.0.4429
  • Python package version: 3.9.13.4424

Attachment info

munkitools-5.7.1.4434.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE.

Munki 5.7 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.7, a feature-add and bug-fix release of the Munki tools.

This release is the exact same build as 5.7 Release Candidate 3.

Known issues

  • Munki cannot yet do major OS upgrades on Apple silicon Macs.
  • Managed Software Center has a visual issue under Catalina and earlier: a thin separator line appears between the "title bar" and "content" areas of the window. (This is not an issue new to this release. I am not actively working on this issue; this would be an excellent opportunity for someone to contribute a fix.)

Bug fixes

  • A fix for an issue where clicking on a Notification Center notification would not reliably launch Managed Software Center.app in some configurations. This change may require some additional admin effort -- see "Notification Center changes" below for details
  • A fix for over-aggressive cleanup of the download cache which sometimes removed partial (incomplete) downloads, causing resuming partial downloads to fail and forcing it to start over from zero on a subsequent attempt. 450294b
  • An attempt to improve the behavior around Apple updates on Apple silicon for those updates that do not require a restart (IOW, to actually show them in the MSC UI) f6c618a
  • A fix for an issue where an "aggressive/obnoxious" notification triggered when there was another application in full screen mode might result in all interaction being blocked. See #1108 for more details on the issue.

Changes

  • PyObjC version has been bumped to 8.5
  • Included Python version is now 3.9.13
  • This version has a more "lightweight" PyObjC install than did Munki 5.6.x and earlier. If you are using munki-python with your own scripts, you should test them thoroughly against this release, and consider using a non-Munki python for your non-Munki uses.
  • A new option (-A) to make_munki_mpkg.sh build and include a component package that triggers a managedsoftwareupdate --auto run immediately after install. This is intended for use with a DEP/ADE-style enrollment where the user creates their account in the Setup Assistant. Once the Setup Assistant exits, the user is automatically logged into their newly-created account, skipping any chance for Munki to bootstrap at the loginwindow. Using this option will cause Munki to do an automatic run in the background immediately. Test this option thoroughly in your environment to make sure it works for your needs.
  • Removed the -m option to make_munki_mpkg.sh: the package generated should work in both DEP/ADM install scenarios and other installation scenarios.

Notification Center changes

  • Notification Center notifications are posted by the munki-notifier.app, which is a helper app included inside the Managed Software Center application. Prior to Munki 5.7, it used a "clever" but unsupported technique to "spoof" the bundle identifier of Managed Software Center.app (com.googlecode.munki.ManagedSoftwareCenter). This technique caused Notification Center to display MSC.app's icon in the notifications, and to attempt to launch MSC.app (instead of munki-notifier) when a notification was clicked on.
  • For reasons not entirely understood yet (though I have some theories), this spoofing technique failed in some configurations, with usernotifyd complaining that it could not "...find appropriate application to launch for com.googlecode.munki.ManagedSoftwareCenter..." and therefore failing to launch MSC.app.
  • This issue seemed to affect Apple silicon Macs 100% of the time. I suspect it has to do with the fact that all code must be signed on Apple silicon (by default Munki's code is "ad-hoc" signed on Apple silicon), and that the signature of the real MSC.app does not match the signature of munki-notifier. This might explain the failure for some people even on Intel -- perhaps they were signing the GUI apps.
  • The problem can be avoided by abandoning the bundle identifier "spoofing" technique and letting a click on a notification just (re-)launch munki-notifier, which in turn can launch MSC.app. We can make munki-notifier look like MSC.app when posting notifications by giving it the same icon as MSC.app and using localized display names to cause it to display the same name as MSC.app. From a user's point-of-view, it still looks like the notifications are coming from MSC.app. But from Notification Center's perspective, the notifications are coming from munki-notifier, which has a bundle identifier of com.googlecode.munki.munki-notifier.
  • Machines that ran releases of Munki prior to 5.7 will now likely have two entries for "Managed Software Center" in the Notification Center preferences pane. One would be the "old" one for the com.googlecode.munki.ManagedSoftwareCenter bundle identifier; the other will be the new one for munki-notifier's actual com.googlecode.munki.munki-notifier bundle identifier.
  • Administrator task: If you are currently installing a configuration profile to ensure Managed Software Center notifications are being allowed/delivered, you'll need to update that profile (or add a new one) to allow notifications from munki-notifier (bundle identifier com.googlecode.munki.munki-notifier). If you do not install a profile, your users (running Catalina and above) will get a new notification asking if they want to allow "Managed Software Center" to send them notifications. Assume that many will say no.
  • Administrator task: If you "re-brand" Managed Software Center, you'll need to make changes to the munki-notifier app as well, since it now shares an icon and localized display names with Managed Software Center. Tools like munki-rebrand (https://github.com/ox-it/munki-rebrand) will need to be updated. (It appears that munki-rebrand has been updated.)

Other changes

A complete list of changes is here:
v5.6.4...v5.7.0

Build info

The GUI apps and the Python framework were built under Xcode 13.3.1 on macOS 12.3.1. Earlier versions of Xcode have not been tested and may or may not have issues.

Package versioning

  • metapackage version: 5.7.0.4429
  • munki core tools version: 5.7.0.4428
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.6.0.4429
  • Python package version: 3.9.13.4424

Attachment info

munkitools-5.7.0.4429.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE.

Munki 5.6.4 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.6.4, a bug-fix release of the Munki tools.

Known issues:

  • Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

  • Fix for items displaying in Managed Software Center's Updates view under both Pending Updates and Available Updates. See #1116 Commit: d734c2c
  • Fix for bytes vs string issue in removepackages: 7708340
  • Attempt to use softwareupdate item "Deferred" info if available to not display deferred items: 1a7ab81

Other changes

A complete list of changes is here:
v5.6.3...v5.6.4

See the release notes for the 5.6.0, 5.6.1, 5.6.2, and 5.6.3 releases for changes since Munki 5.5.x.

Package versioning

  • metapackage version: 5.6.4.4406
  • munki core tools version: 5.6.4.4406
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.5.2.4402
  • Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

  • "munkitools-5.6.4.4406.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
  • "munkitools_DEP-5.6.4.4406.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B).
    You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

Munki 5.6.3 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.6.3, a bug-fix release of the Munki tools.

Known issues:

  • Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

  • Change the "shebang" lines of makecatalogs and repoclean to #!/usr/local/munki/munki-python. This will make these tools easier to use on macOS after Apple removes their Python 2 install from the OS.
  • Remove code/server, which contained only a sample proof-of-concept Python 2 CGI that is arguably of little use now.

Other changes

A complete list of changes is here:
v5.6.2...v5.6.3

See the release notes for the 5.6.0, 5.6.1 and 5.6.2 releases for changes since Munki 5.5.x.

Package versioning

  • metapackage version: 5.6.3.4401
  • munki core tools version: 5.6.3.4401
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.5.1.4395
  • Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

  • "munkitools-5.6.3.4401.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
  • "munkitools_DEP-5.6.3.4401.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B).
    You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

Munki 5.6.2 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.6.2, a bug-fix release of the Munki tools.

Known issues:

  • Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

  • Managed Software Center: if there are "overdue" installs and we've entered "obnoxious mode", don't display other available installs, as adding them provides a trivial way to escape "obnoxious mode": e590d6f
  • macOS installs: do not attempt to install on Apple silicon. When generating a pkginfo for an OS installer, mark with 'supported_architectures': ["x86_64"] since Munki cannot yet upgrade macOS on Apple silicon. 38d8cca

Other changes

A complete list of changes is here:
v5.6.1...v5.6.2

See the release notes for the 5.6.0 and 5.6.1 releases for changes since Munki 5.5.x.

Package versioning

  • metapackage version: 5.6.2.4398
  • munki core tools version: 5.6.2.4398
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.5.1.4395
  • Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

  • "munkitools-5.6.2.4398.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
  • "munkitools_DEP-5.6.2.4398.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B).
    You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

Munki 5.6.1 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.6.1, a bug-fix release of the Munki tools.

Known issues:

  • Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

  • Change PyObjC version to 7.2 to resolve an issue with client certificates on macOS 10.14.x. Thanks to @rrenstrom and @np5. f6a4917 #1115
  • In Managed Software Center, disable "Reload Page" menu item when in "obnoxious mode", which provided an easy way to escape "obnoxious mode". 5c9513c

Other changes

A complete list of changes is here:
v5.6.0...v5.6.1

See the release notes for the 5.6.0 release for changes since Munki 5.5.x.

Package versioning

  • metapackage version: 5.6.1.4394
  • munki core tools version: 5.6.1.4393
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.5.1.4394
  • Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

  • "munkitools-5.6.1.4394.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
  • "munkitools_DEP-5.6.1.4394.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B).
    You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

Munki 5.6 Official Release

Compare
Choose a tag to compare

This is the official release of Munki 5.6, a feature-add and bug-fix release of the Munki tools.

This release is identical to 5.6 Release Candidate 2.

Munki 5.6 is recommended for use with macOS Monterey, and is supported on macOS 10.11 - macOS 12.

Known issues:

  • Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

General changes and fixes:

  • Bump Python version to 3.9.7; bump PyObjC to 7.3 87365be
  • Add software update catalog for macOS 12: d90f9e2
  • Tighten the security of the client keychain. Thanks to Rob Renstrom. 7d200b9
  • More reliable "escalated" notifications of long-pending installs: 65bb1d1
  • A fix for one possible crash of app_usage_monitor: d6e4054

Managed Software Center changes and fixes:

  • Hide left sidebar in Managed Software Center if there are no optional installs. Thanks to Chris Grande. 503be23
  • Fix for a crash when in fullscreen mode: 13e4d42
  • Better behavior when "Light/Dark" interface mode is set to Automatic: e1ad739
  • Don't prompt for FV password if we're being asked to quit as part of installing an Apple update: 7ce36e1
  • Increase time after MSC opens the Software Update preferences pane until it exits: cfd7d45

Other changes

A complete list of changes is here:
v5.5.1...v5.6.0

Package versioning

  • metapackage version: 5.6.0.4385
  • munki core tools version: 5.6.0.4385
  • LaunchAgents/LaunchDaemons version: 3.0.3265
  • Apps package version: 5.5.0.4382
  • Python package version: 3.9.7.4378

Attachment info

There are two packages attached to this release:

  • "munkitools-5.6.0.4385.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
  • "munkitools_DEP-5.6.0.4385.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B).
    You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.