Assets 3

This is the official release of Munki 3.3.1, a bug-fix update to the Munki tools.

Major fixes/changes:

  • Fix for fdesetup authrestart behavior changes in High Sierra with APFS volumes that caused authrestarts to fail: d248ec8
  • Fix for auto-detecting Munki repo in environments where DHCP does not set the current domain: ff0832f
  • Fix for unexpected behavior when processing managed_uninstalls for a pkginfo that contained an empty installs array: 0bf8d5d
  • Fix for Mojave Betas where Python's OpenSSL support is somewhat broken: b1e94a0
  • Don't allow user-writable SelfServeManifest to be a symlink, which could result in disclosure of sensitive data: 470013a
  • Additional security and validation around copying items from disk image: 0f42d6e 8496349 ee7be29
  • Other small bug fixes and tweaks. For a complete list of changes, see v3.3.0...v3.3.1

@gregneagle gregneagle released this May 9, 2018 · 16 commits to master since this release

Assets 3

This is the official of Munki 3.3, a bug-fix and feature update to the Munki tools.
This is the same build as 3.3 Release Candidate 2 -- there have been no changes since that build.

New features in Munki 3.3:

  • Improved auto-detection of a local Munki repo that will prefer https://munki.your.domain/repo URLs: 975d2b1

  • Comparison "facts" for conditional items now include os_build_number and os_build_last_component: 82c076a

Other fixes/changes:

  • Change app_usage_monitor to a user-level agent that reports to a system-level daemon (appusaged): 62dd770
  • munkiimport will now copy the value of the "featured" key when importing a new version of an existing featured item: c837176
  • New strategy for determining install success/failure of Apple softwareupdate updates: ddac5a7
  • make_munki_mpkg.sh should now successfully build Managed Software Center.app and MunkiStatus.app under Xcode 9 (thanks Michal Moravec): 870c260
  • Many other small bug fixes and tweaks. For a complete list of changes, see v3.2.1...v3.3.0

@gregneagle gregneagle released this Apr 10, 2018 · 38 commits to master since this release

Assets 3

This is the official release of Munki 3.2.1, a bug-fix update to the Munki tools.

Fixes:

  • Correctly handle hostnames that contain Unicode characters when requesting a primary manifest: 332212b
  • Explicitly clear softwareupdate's LastSessionSuccessful value before checking for Apple updates to minimize false reports of unsuccessful sessions: e1f5f02
  • Fix an issue that could cause some items to appear in multiple categories in Managed Software Center: 7ec9402

For a complete list of changes, see v3.2.0...v3.2.1

@gregneagle gregneagle released this Jan 30, 2018 · 42 commits to master since this release

Assets 3

This is the official release of Munki 3.2, a bug-fix and feature update to the Munki tools.

New feature in Munki 3.2:

  • Localized pkgsinfo support (#809). pkgsinfo items can now contain localized strings for category, description, display_name, preinstall_alert, preuninstall_alert, and preupgrade_alert. Thanks to @bochoven.

Other fixes/changes:

  • Generate a better default installed_size when munkiimporting a High Sierra installer. f4078f6
  • Refactoring of much of the admin tools code so that a future release of AutoPkg and other tools that work with Munki can use Munki's repo plugin support.
  • Changes in how icons are extracted/generated to preserve embedded ColorSync info. Resolves a cosmetic issue with some icons in macOS 10.13. 3d7021a
  • Re-write the AppleUpdates.plist after installing unattended Apple updates. This addresses an issue where Apple items with force_install_after_date would get their countdown "reset" after an unattended Apple update install. 2b0f9a4
  • Fix for munki-notifier so it will respect Managed Preferences and root preferences for UseNotificationCenter days 42152f3 b59eeff
  • Many other small bug fixes and tweaks. For a complete list of changes, see v3.1.1...v3.2.0

@gregneagle gregneagle released this Nov 21, 2017 · 90 commits to master since this release

Assets 3

This is the official release of Munki 3.1.1, a bug-fix update to the Munki tools.

Fixes/changes in the 3.1.1 release:

  • Respect the value of RestartAction for configuration profile installs (#808): 2462981
  • Fix for displaying warnings or notes for items in Managed Software Center if the item had no description (#811): d80f18c
  • Fix for status display for unavailable items in Managed Software Center (#812): 661e82d
  • More fixes for command-line tools in High Sierra: 9526fab
  • make_munki_mpkg scripts now include a product id in the distribution package. This makes the package more compatible with customized installs of macOS High Sierra: 293a707
  • Add managed preferences (Config Profile or MCX) support for UseNotificationCenterDays preference (#819): 1aef2ca

Major changes in the 3.1 release:

  • New bootstrapping tools and behaviors:

    • managedsoftwareupdate has two new options: --set-bootstrap-mode and --clear-bootstrap-mode
    • managedsoftwareupdate --set-bootstrap-mode creates the needed /Users/Shared/.com.googlecode.munki.checkandinstallatstartup file, and also turns off FileVault auto login (this is the automatic login to the account of the user who unlocks the FV2-encrpyted disk at boot), by setting the com.apple.loginwindow DisableFDEAutoLogin preference to True.
    • managedsoftwareupdate --clear-bootstrap-mode removes the /Users/Shared/.com.googlecode.munki.checkandinstallatstartup file and resets the com.apple.loginwindow DisableFDEAutoLogin preference to its previous value.
    • When performing a macOS upgrade (using an Install macOS.app/startosinstall), Munki uses these new mechanisms in order to effectively re-bootstrap after an OS upgrade. See 99d902b
  • Managed Software Center.app

    • Choosing "Reload page" from the Navigate menu now also triggers an update check.
    • Managed Software Center.app can now optionally show optional installs and updates that apply to macOS versions higher than the currently installed version. This can help motivate macOS upgrades, as users can see that in order to be able to get the latest version of Keynote, they must first upgrade to 10.12.x, for example. This optional behavior is enabled by setting the ManagedInstalls preference ShowOptionalInstallsForHigherOSVersions to true.
    • "Problem" updates are now displayed on the Updates page of Managed Software Center.app; these are updates that cannot be installed for some reason (the most common one being insufficient disk space) that a user might be able to remedy.
    • Faster launching of Managed Software Center.app.
  • Faster launching of MunkiStatus.app.

  • startosinstall OS upgrade pkginfo items can now contain an additional array of strings, which are added as additional options to the startosinstall binary. For example:

    <key>additional_startosinstall_options</key>
    <array>
        <string>--converttoapfs</string>
        <string>NO</string>
    </array>
  • managedsoftwareupdate has a new --show-config option, which will print Munki's configuration. This can be helpful when troubleshooting the potentially confusing interaction between different preference levels and managed preferences.

  • makecatalogs now stores icon hashes in a separate file (icons/_icon_hashes.plist) instead of in the catalogs. This enables the client to skip attempted downloads of icons if they are not listed in icons/_icon_hashes.plist, as well as only re-downloading icons if the hashes change.

  • Munki now prevents idle sleep during the check/download phase if the machine is on AC power.

  • New makecatalogs option to skip checking for installer item existence; useful if pkgs are stored elsewhere. Thanks to Yoann Gini: 04b3364

  • New move-install-to-uninstall command for manifestutil. Thanks to @poundbangbash: 0e256e0

  • Updated localizations for Danish, Dutch, Finnish, French, German, Italian, Japanese, Norwegian, Russian, and Spanish. Thanks to all who contributed to these.

Bug fixes and other changes since the 3.0.3 release:

  • Fix for mounting fileshares in 10.13 in the command-line admin tools: e13c21e

  • Add the (presumed) default softwareupdate CatalogURL for High Sierra: e1ccdae

  • Bug fix for installed_state logic that caused some items to be displayed as 'installed' when they should have shown as 'Update available': 89e2faf

  • Fix to purge the cached softwareupdate catalog after a macOS upgrade: b6567fc

  • Update osinstaller module to handle some startosinstall output changes for High Sierra: e3e44a4

• Other tweaks to osinstaller code to ensure a reboot happens after startosinstall exits, even if we get into an unexpected state: 5471366, 2c5d2a0

munkiimport: Don't print a warning about failure to read catalogs/all for a brand-new, empty repo: c45b5e8

• Fix for a bug where installing a nopkg item that did not require a restart cleared the restart flag set by earlier items that did require a restart: eb17f85

Known issues:

  • If Managed Software Center.app is open while the munki tools are upgraded to 3.1, you may see some display "ugliness" in the Updates view. This issue goes away with a relaunch of Managed Software Center.app. See #806

  • makecatalogs in Munki 3.1 generates and stores icon hashes differently than earlier releases of Munki. If you use a 3.1+ version of makecatalogs but still have a lot of pre-3.1 Munki clients, you'll see a large number of attempts to download icons from those clients. If this is an issue you wish to avoid, use a pre-3.1 version of makecatalogs until the majority of your fleet is upgraded to Munki 3.1 or later.

Read about new features in Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

@gregneagle gregneagle released this Sep 18, 2017 · 107 commits to master since this release

Assets 3

This is the official release of Munki 3.1, a feature update to the Munki tools.
This is the same build as Release Candidate 5.

Read more about Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

Major changes in the 3.1 release:

  • New bootstrapping tools and behaviors:

    • managedsoftwareupdate has two new options: --set-bootstrap-mode and --clear-bootstrap-mode
    • managedsoftwareupdate --set-bootstrap-mode creates the needed /Users/Shared/.com.googlecode.munki.checkandinstallatstartup file, and also turns off FileVault auto login (this is the automatic login to the account of the user who unlocks the FV2-encrpyted disk at boot), by setting the com.apple.loginwindow DisableFDEAutoLogin preference to True.
    • managedsoftwareupdate --clear-bootstrap-mode removes the /Users/Shared/.com.googlecode.munki.checkandinstallatstartup file and resets the com.apple.loginwindow DisableFDEAutoLogin preference to its previous value.
    • When performing a macOS upgrade (using an Install macOS.app/startosinstall), Munki uses these new mechanisms in order to effectively re-bootstrap after an OS upgrade. See 99d902b
  • Managed Software Center.app

    • Choosing "Reload page" from the Navigate menu now also triggers an update check.
    • Managed Software Center.app can now optionally show optional installs and updates that apply to macOS versions higher than the currently installed version. This can help motivate macOS upgrades, as users can see that in order to be able to get the latest version of Keynote, they must first upgrade to 10.12.x, for example. This optional behavior is enabled by setting the ManagedInstalls preference ShowOptionalInstallsForHigherOSVersions to true.
    • "Problem" updates are now displayed on the Updates page of Managed Software Center.app; these are updates that cannot be installed for some reason (the most common one being insufficient disk space) that a user might be able to remedy.
    • Faster launching of Managed Software Center.app.
  • Faster launching of MunkiStatus.app.

  • startosinstall OS upgrade pkginfo items can now contain an additional array of strings, which are added as additional options to the startosinstall binary. For example:

    <key>additional_startosinstall_options</key>
    <array>
        <string>--converttoapfs</string>
        <string>NO</string>
    </array>
  • managedsoftwareupdate has a new --show-config option, which will print Munki's configuration. This can be helpful when troubleshooting the potentially confusing interaction between different preference levels and managed preferences.

  • makecatalogs now stores icon hashes in a separate file (icons/_icon_hashes.plist) instead of in the catalogs. This enables the client to skip attempted downloads of icons if they are not listed in icons/_icon_hashes.plist, as well as only re-downloading icons if the hashes change.

  • Munki now prevents idle sleep during the check/download phase if the machine is on AC power.

  • New makecatalogs option to skip checking for installer item existence; useful if pkgs are stored elsewhere. Thanks to Yoann Gini: 04b3364

  • New move-install-to-uninstall command for manifestutil. Thanks to @poundbangbash: 0e256e0

  • Updated localizations for Danish, Dutch, Finnish, French, German, Italian, Japanese, Norwegian, Russian, and Spanish. Thanks to all who contributed to these.

Bug fixes and other changes since the 3.0.3 release:

  • Fix for mounting fileshares in 10.13 in the command-line admin tools: e13c21e

  • Add the (presumed) default softwareupdate CatalogURL for High Sierra: e1ccdae

  • Bug fix for installed_state logic that caused some items to be displayed as 'installed' when they should have shown as 'Update available': 89e2faf

  • Fix to purge the cached softwareupdate catalog after a macOS upgrade: b6567fc

  • Update osinstaller module to handle some startosinstall output changes for High Sierra: e3e44a4

• Other tweaks to osinstaller code to ensure a reboot happens after startosinstall exits, even if we get into an unexpected state: 5471366, 2c5d2a0

munkiimport: Don't print a warning about failure to read catalogs/all for a brand-new, empty repo: c45b5e8

• Fix for a bug where installing a nopkg item that did not require a restart cleared the restart flag set by earlier items that did require a restart: eb17f85

Known issues:

  • If Managed Software Center.app is open while the munki tools are upgraded to 3.1, you may see some display "ugliness" in the Updates view. This issue goes away with a relaunch of Managed Software Center.app. See #806

  • makecatalogs in Munki 3.1 generates and stores icon hashes differently than earlier releases of Munki. If you use a 3.1+ version of makecatalogs but still have a lot of pre-3.1 Munki clients, you'll see a large number of attempts to download icons from those clients. If this is an issue you wish to avoid, use a pre-3.1 version of makecatalogs until the majority of your fleet is upgraded to Munki 3.1 or later.

@gregneagle gregneagle released this Jul 11, 2017 · 185 commits to master since this release

Assets 3

Introduction

This is the official release of Munki 3.0.3, a bug-fix update to the Munki tools.

Read more about Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

Munki 3 is considered stable and suitable for production use, but you may want to roll it out in stages.

Changes/fixes for this release:

  • app_usage_monitor: launchd should now relaunch it if it exits for some reason: 61500aa

  • munkiimport: When creating a disk image, explicitly specify HFS+ format; avoids 10.13 behavior of creating APFS disk images bay default. 10f116a

  • removepackages/removepackage.py: Fix for import loop issue: e59467c

Changes/fixes in the 3.0.2 release:

  • Fix for Munki postflight scripts always reporting a runtype of 'osinstall': a7c43cf

  • Fix for Managed Software Center.app: revert to Munki2 behavior when generating a list of pending installs for the Updates view. Addresses an issue where optional items could not be removed from the pending update list: e660011

  • Fix for Managed Software Center.app: Addresses an issue that caused an alert about pending update to not display when quitting the app: 82dc9d9

Changes/fixes in the 3.0.1 release:

  • Better handling of Unicode file paths in the command-line tools: 70ba862

  • Fixes in Managed Software Center for macOS 10.13 compatibility: 0717bf7

  • Link Managed Software Center.app and MunkiStatus.app to Python 2.7 (was Python 2.6 previously): 9da9d24

Munki 3 new features/changes information:

  • "Native" support for macOS installation applications (Like "Install macOS Sierra.app").

  • Support for authorized restarts.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Notification Manager notification support.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Repo plugin support contributed by Centrify.
    Allows the creation of plugins to enable the Munki command-line tools to work with cloud-based repos, or repos not available via traditional file paths, or to add additional capabilities/actions when working with a file-based repo.
    There are a couple of sample/demonstration plugins included: a GitFileRepo plugin for better integration with Git repos, and a MWA2APIPlugin as an example of working with a repo that doesn't have direct filesystem access.

  • Auto-removal of optionally-installed applications that have not been used in an admin-specified time period.

  • Support for a new "Featured" psuedo-category to be used with Managed Software Center. Items can be added to a list of "featured_items" in a manifest. If there are optional installs that are also in the list of "featured_items", the display of All optional installs in MSC app will be replaced by a display of Featured items.

  • Support for allowing the install of packages signed with untrusted or expired certificates.

  • Change in behavior for 'application' items in lists of installs: if such an item includes a value for 'path', only that path will be compared against. If 'path' does not exist and CFBundleName or CFBundleIdentifier do exist, Munki will consider locally-installed applications that have matching CFBundleName or CFBundleIdentifier for comparision.

See https://github.com/munki/munki/wiki/Munki-3-Information#munki-3-new-features for more information on the new features.

@gregneagle gregneagle released this Jun 28, 2017 · 189 commits to master since this release

Assets 3

Introduction

This is the official release of Munki 3.0.2, a bug-fix update to the Munki tools.

Read more about Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

Munki 3 is considered stable and suitable for production use, but you may want to roll it out in stages.

Changes/fixes for this release:

  • Fix for Munki postflight scripts always reporting a runtype of 'osinstall': a7c43cf

  • Fix for Managed Software Center.app: revert to Munki2 behavior when generating a list of pending installs for the Updates view. Addresses an issue where optional items could not be removed from the pending update list: e660011

  • Fix for Managed Software Center.app: Addresses an issue that caused an alert about pending update to not display when quitting the app: 82dc9d9

Changes/fixes in the 3.0.1 release:

  • Better handling of Unicode file paths in the command-line tools: 70ba862

  • Fixes in Managed Software Center for macOS 10.13 compatibility: 0717bf7

  • Link Managed Software Center.app and MunkiStatus.app to Python 2.7 (was Python 2.6 previously): 9da9d24

Munki 3 new features/changes information:

  • "Native" support for macOS installation applications (Like "Install macOS Sierra.app").

  • Support for authorized restarts.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Notification Manager notification support.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Repo plugin support contributed by Centrify.
    Allows the creation of plugins to enable the Munki command-line tools to work with cloud-based repos, or repos not available via traditional file paths, or to add additional capabilities/actions when working with a file-based repo.
    There are a couple of sample/demonstration plugins included: a GitFileRepo plugin for better integration with Git repos, and a MWA2APIPlugin as an example of working with a repo that doesn't have direct filesystem access.

  • Auto-removal of optionally-installed applications that have not been used in an admin-specified time period.

  • Support for a new "Featured" psuedo-category to be used with Managed Software Center. Items can be added to a list of "featured_items" in a manifest. If there are optional installs that are also in the list of "featured_items", the display of All optional installs in MSC app will be replaced by a display of Featured items.

  • Support for allowing the install of packages signed with untrusted or expired certificates.

  • Change in behavior for 'application' items in lists of installs: if such an item includes a value for 'path', only that path will be compared against. If 'path' does not exist and CFBundleName or CFBundleIdentifier do exist, Munki will consider locally-installed applications that have matching CFBundleName or CFBundleIdentifier for comparision.

See https://github.com/munki/munki/wiki/Munki-3-Information#munki-3-new-features for more information on the new features.

@gregneagle gregneagle released this Jun 13, 2017 · 193 commits to master since this release

Assets 3

Introduction

This is the official release of Munki 3.0.1, a bug-fix update to the Munki tools.

Read more about Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

Munki 3 is considered stable and suitable for production use, but you may want to roll it out in stages.

Changes/fixes for this release:

  • Better handling of Unicode file paths in the command-line tools: 70ba862

  • Fixes in Managed Software Center for macOS 10.13 compatibility: 0717bf7

  • Link Managed Software Center.app and MunkiStatus.app to Python 2.7 (was Python 2.6 previously): 9da9d24

Munki 3 new features/changes information:

  • "Native" support for macOS installation applications (Like "Install macOS Sierra.app").

  • Support for authorized restarts.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Notification Manager notification support.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Repo plugin support contributed by Centrify.
    Allows the creation of plugins to enable the Munki command-line tools to work with cloud-based repos, or repos not available via traditional file paths, or to add additional capabilities/actions when working with a file-based repo.
    There are a couple of sample/demonstration plugins included: a GitFileRepo plugin for better integration with Git repos, and a MWA2APIPlugin as an example of working with a repo that doesn't have direct filesystem access.

  • Auto-removal of optionally-installed applications that have not been used in an admin-specified time period.

  • Support for a new "Featured" psuedo-category to be used with Managed Software Center. Items can be added to a list of "featured_items" in a manifest. If there are optional installs that are also in the list of "featured_items", the display of All optional installs in MSC app will be replaced by a display of Featured items.

  • Support for allowing the install of packages signed with untrusted or expired certificates.

  • Change in behavior for 'application' items in lists of installs: if such an item includes a value for 'path', only that path will be compared against. If 'path' does not exist and CFBundleName or CFBundleIdentifier do exist, Munki will consider locally-installed applications that have matching CFBundleName or CFBundleIdentifier for comparision.

See https://github.com/munki/munki/wiki/Munki-3-Information#munki-3-new-features for more information on the new features.

Assets 3

Introduction

This is the official release of Munki 3.0, a major update to the Munki tools.
This is the same build as Beta 10 and Release Candidate 1.

Read more about Munki 3 here: https://github.com/munki/munki/wiki/Munki-3-Information

Munki 3 is considered stable and suitable for production use, but you may want to roll it out in stages.

New features/changes information:

  • "Native" support for macOS installation applications (Like "Install macOS Sierra.app").

  • Support for authorized restarts.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Notification Manager notification support.
    This requires some launchd changes that will require a restart when upgrading from Munki 2.x to 3.x.

  • Repo plugin support contributed by Centrify.
    Allows the creation of plugins to enable the Munki command-line tools to work with cloud-based repos, or repos not available via traditional file paths, or to add additional capabilities/actions when working with a file-based repo.
    There are a couple of sample/demonstration plugins included: a GitFileRepo plugin for better integration with Git repos, and a MWA2APIPlugin as an example of working with a repo that doesn't have direct filesystem access.

  • Auto-removal of optionally-installed applications that have not been used in an admin-specified time period.

  • Support for a new "Featured" psuedo-category to be used with Managed Software Center. Items can be added to a list of "featured_items" in a manifest. If there are optional installs that are also in the list of "featured_items", the display of All optional installs in MSC app will be replaced by a display of Featured items.

  • Support for allowing the install of packages signed with untrusted or expired certificates.

  • Change in behavior for 'application' items in lists of installs: if such an item includes a value for 'path', only that path will be compared against. If 'path' does not exist and CFBundleName or CFBundleIdentifier do exist, Munki will consider locally-installed applications that have matching CFBundleName or CFBundleIdentifier for comparision.

See https://github.com/munki/munki/wiki/Munki-3-Information#munki-3-new-features for more information on the new features.