Re: [munki-dev] Moving to reposado, smartest way to update SoftwareUpdateServerURL?

[Gregory Neagle]

On Oct 5, 2012, at 2:56 PM, Steve Yuroff <syu...@hiebing.com> wrote:

> Hi all,
>
> I'm just about ready to alter my internal Apple software updating to use the very superior Reposado/margartia combo. One ingredient of this will be to change my ManagedInstalls.plist SoftwareUpdateServerURL value. In considering how to do this, the idea of a payload free package, one per OS version, handed out by munki to appropriate machines via conditional_items, with the proper defaults write command comes to mind.
>
> I know it would work, but I'm not sure it's the best way. How would you address this one?

I, personally, would handle this by first implementing URL rewrite rules on the web server serving up Reposado catalogs so that I need worry only about branches, not OS-specific catalogs.

See https://raw.github.com/wdas/reposado/master/docs/URL_rewrites.txt for more info on URL rewrites.

Secondly, I'd create a payload-free package that set the appropriate SoftwareUpdateServerURL in ManagedInstalls.plist.

-Greg


>
> (Yes, puppet fans… I can hear you already. But let's say I'd like to finish this before I puppetize all my machines.)
> --
> Steve Yuroff
> @swy
>

[Marnin Goldberg]

On 10/5/12 7:11 PM, Gregory Neagle wrote:
>
> On Oct 5, 2012, at 2:56 PM, Steve Yuroff <syu...@hiebing.com> wrote:
>
>> Hi all,
>>
>> I'm just about ready to alter my internal Apple software updating to use the very superior Reposado/margartia combo. One ingredient of this will be to change my ManagedInstalls.plist SoftwareUpdateServerURL value. In considering how to do this, the idea of a payload free package, one per OS version, handed out by munki to appropriate machines via conditional_items, with the proper defaults write command comes to mind.
>>
>> I know it would work, but I'm not sure it's the best way. How would you address this one?
>
> I, personally, would handle this by first implementing URL rewrite rules on the web server serving up Reposado catalogs so that I need worry only about branches, not OS-specific catalogs.
>
> See https://raw.github.com/wdas/reposado/master/docs/URL_rewrites.txt for more info on URL rewrites.
>
> Secondly, I'd create a payload-free package that set the appropriate SoftwareUpdateServerURL in ManagedInstalls.plist.
>

The CatalogURL key in
/Library/Preferences/com.apple.SoftwareUpdate.plist would work too. Any
advantage or disadvantage of using ManagedInstalls.plist vs
com.apple.SoftwareUpdate.plist?

Marnin

[Gregory Neagle]

On Oct 11, 2012, at 6:16 AM, Marnin Goldberg <goldb...@mail.montclair.edu> wrote:

The CatalogURL key in /Library/Preferences/com.apple.SoftwareUpdate.plist would work too. Any advantage or disadvantage of using ManagedInstalls.plist vs com.apple.SoftwareUpdate.plist?

If you point Munki to an internal software update server using the SoftwareUpdateServerURL key in ManagedInstalls.plist, but leave com.apple.SoftwareUpdate pointing to Apple's servers, this allows you to use Munki to install "approved" updates, but also allows techs/admins to access Apple's servers for updates that have not yet been added to your local software update replica.

-Greg