Best practices / recommendations on managed updates and optional installs

357 views
Skip to first unread message

as...@siprep.org

unread,
Nov 30, 2015, 2:14:24 PM11/30/15
to munki-discuss
I have a lot of packages marked as optional installs, but I always want them updated, so I've also marked them all as managed updates. The way I'm doing this is a bit clunky, though.

Basically, I have a manifest for just managed updates and have all my other manifests include that one. Then I add every single package to the managed_updates manifest.

Anyone else coming up against this (wanting all optional installs to be managed updates)? And, if so, are you handling this similarly, or do you have other cool tricks to recommend?

Erik Gomez

unread,
Nov 30, 2015, 4:18:59 PM11/30/15
to munki-...@googlegroups.com
What case are you trying to handle? Once an application is managed, it is managed...

Sent from my iPhone
--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/7f165589-d763-4548-9f2e-fc5b1f6fcd4f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Mr. Alan Siu

unread,
Nov 30, 2015, 4:55:31 PM11/30/15
to munki-...@googlegroups.com
Thanks, Erik. I'm not asking about managed_installs but about managed_updates for optional installs.

In other words, Skype is an optional install. If a user installs Skype 7.1 and then Microsoft releases Skype 7.2, I want Skype to automatically update to 7.2. The only way to do that (and keep it an optional install) is to make Skype a managed update.

So I've been creating a separate manifest to make all packages managed updates, but that means I have to keep constantly updating the manifest when new types of packages are added. That's why I'm asking about suggestions for alternative ways of approaching the issue.


Alan Siu
Client Systems Analyst
St. Ignatius College Preparatory

Gregory Neagle

unread,
Nov 30, 2015, 4:59:31 PM11/30/15
to munki-...@googlegroups.com
On Nov 30, 2015, at 1:55 PM, Mr. Alan Siu <as...@siprep.org> wrote:

Thanks, Erik. I'm not asking about managed_installs but about managed_updates for optional installs.

In other words, Skype is an optional install. If a user installs Skype 7.1 and then Microsoft releases Skype 7.2, I want Skype to automatically update to 7.2.

If the user installed Skype using MSC.app, Munki now manages the item and will keep it updated. No need to add it to managed_updates.

The only way to do that (and keep it an optional install) is to make Skype a managed update.

managed_updates tells Munki to update software that is not in managed_installs in any relevant manifest. It can be thought of as meaning “(attempt to) update these items even if Munki did not do the original install”.


So I've been creating a separate manifest to make all packages managed updates, but that means I have to keep constantly updating the manifest when new types of packages are added. That's why I'm asking about suggestions for alternative ways of approaching the issue.

I have none, other than some sort of wrapper script you could use to add a single item to both optional_installs and managed_updates, or perhaps a script that simply read the value optional_installs and wrote it to managed_updates.

Mr. Alan Siu

unread,
Nov 30, 2015, 5:01:58 PM11/30/15
to munki-...@googlegroups.com
Thanks, Greg.

I know Munki keeps things up to date, but what I like about how it handles managed_updates is not having the user have to hit update on each item and then wait for the item to download. Managed updates seem to happen more fluidly in the background with more consistency.

It sounds as if maintaining the list manually as I have been is an okay way to do it. If I muster together a script, I'll post it up on GitHub.


Alan Siu
Client Systems Analyst
St. Ignatius College Preparatory

Gregory Neagle

unread,
Nov 30, 2015, 5:04:16 PM11/30/15
to munki-...@googlegroups.com
On Nov 30, 2015, at 2:01 PM, Mr. Alan Siu <as...@siprep.org> wrote:

Thanks, Greg.

I know Munki keeps things up to date, but what I like about how it handles managed_updates is not having the user have to hit update on each item and then wait for the item to download

They don’t have to do this, unless the item is being removed from the local SelfServeManifest’s managed_installs after Munki installs it.

Items in the local SelfServeManifest’s managed_installs are treated the same (and behave the same) as managed_installs in any other manifest.

-Greg

Mr. Alan Siu

unread,
Nov 30, 2015, 5:42:19 PM11/30/15
to munki-...@googlegroups.com
Okay... that's bizarre. I could have sworn things were not automatically updating without being in managed updates, but I must have been hallucinating. I just tested it on Munki 2.4 (with Skype as a test case not in managed updates), and it worked to just update.

Thanks for your help!


Alan Siu
Client Systems Analyst
St. Ignatius College Preparatory

Erik Gomez

unread,
Nov 30, 2015, 6:17:00 PM11/30/15
to munki-...@googlegroups.com
I would also try to use unattended install keys on as many things as you can. This will allow you to silently update optional items, so long as they aren't in active use by the user.

Sent from my iPad

Mr. Alan Siu

unread,
Nov 30, 2015, 6:18:00 PM11/30/15
to munki-...@googlegroups.com
Thanks. I definitely try to do that as much as possible.


Alan Siu
Client Systems Analyst
St. Ignatius College Preparatory

Reply all
Reply to author
Forward
0 new messages