Future death of DeployStudio with Profile manager and munki

359 views
Skip to first unread message

Dieu Volkanos

unread,
Jun 1, 2018, 1:41:16 PM6/1/18
to munki-...@googlegroups.com
Hi,

I use DeployStudio to
  • push Mac OS with postedit MCX ~root/Library/Preferences/com.apple.loginwindow.plist for the loginscipt
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow EnableMCXLoginScripts -bool TRUE
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow MCXScriptTrust Authenticated
  • push munki client package. 
When DeployStudio will die... how I can edit the com.apple.loginwindow for activate the loginscript to install and config munki client??

or

How I can install munki with profile manager...

My mdm is Apple Profile Manager....

Somebody have a good idea?

Thanks
DieuVolkanos


PS. Sorry for my bad english...

Adam M. Anklewicz

unread,
Jun 1, 2018, 2:04:58 PM6/1/18
to munki-...@googlegroups.com
If you're generating your .mobileconfig files in Profile Manager, you can import those directly into your Munki repo and use Munki to push them out. Munki has native support for profiles.


On Fri, Jun 1, 2018 at 1:39 PM, Dieu Volkanos <dieuvo...@gmail.com> wrote:
Hi,

I use DeployStudio to
  • push Mac OS with postedit MCX ~root/Library/Preferences/com.apple.loginwindow.plist for the loginscipt
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow EnableMCXLoginScripts -bool TRUE
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow MCXScriptTrust Authenticated
  • push munki client package. 
When DeployStudio will die... how I can edit the com.apple.loginwindow for activate the loginscript to install and config munki client??

My mdm is Apple Profile Manager....

Somebody have a good idea?

Thanks
DieuVolkanos


PS. Sorry for my bad english...

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/ba4ff6cd-4e33-4328-a2ab-92c0252f7870%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Dieu Volkanos

unread,
Jun 1, 2018, 2:15:53 PM6/1/18
to munki-discuss
Not sure to understand...

If I prepare the mac without DeployStudio, the Mac client doesn't have munki client sofware installed. The client don't run anything that come from munki server. My problem is... i don't know how to install/config munki client after dep (apple school manager) push the config.

Thanks to help me!

Le vendredi 1 juin 2018 14:04:58 UTC-4, Adam M. Anklewicz a écrit :
If you're generating your .mobileconfig files in Profile Manager, you can import those directly into your Munki repo and use Munki to push them out. Munki has native support for profiles.
On Fri, Jun 1, 2018 at 1:39 PM, Dieu Volkanos <dieuvo...@gmail.com> wrote:
Hi,

I use DeployStudio to
  • push Mac OS with postedit MCX ~root/Library/Preferences/com.apple.loginwindow.plist for the loginscipt
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow EnableMCXLoginScripts -bool TRUE
    • sudo defaults write /var/root/Library/Preferences/com.apple.loginwindow MCXScriptTrust Authenticated
  • push munki client package. 
When DeployStudio will die... how I can edit the com.apple.loginwindow for activate the loginscript to install and config munki client??

My mdm is Apple Profile Manager....

Somebody have a good idea?

Thanks
DieuVolkanos


PS. Sorry for my bad english...

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.

Adam M. Anklewicz

unread,
Jun 1, 2018, 2:24:19 PM6/1/18
to munki-...@googlegroups.com
You're right, sorry, my misunderstanding, I'm sorry. First off, I'd recommend to not use Profile Manager. What I've heard from Apple is that you should only really use it if as a testing platform and not in production. 

If you've already got Apple School Manager running, you want to pass it off to your MDM which can install Munki and then Munki can install the configuration profiles. There's a number of options for MDM solutions. If you can afford to do it, I'd suggest AirWatch, but that's mostly as that's exactly what I'm using for the same purpose and it works great. Took a while to get it configured properly, but their support is decent. 

If you're using Profile Manager, I'm not sure, I mostly just use it in a VM to prepare .mobileconfig files... I'm going to spin up my VM and take a quick look to see.


To unsubscribe from this group and stop receiving emails from it, send an email to munki-discuss+unsubscribe@googlegroups.com.

To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/88f5ae6b-8597-4290-8a14-b0cdc30ee805%40googlegroups.com.

Dieu Volkanos

unread,
Jun 1, 2018, 2:37:30 PM6/1/18
to munki-...@googlegroups.com
I confirm that I use Profile Manager with apple school manager. We are a school so I tried to use the free solution before paying. I run profile manager many years without no problem before the major change of APPLE.

Mr. Alan Siu

unread,
Jun 1, 2018, 2:38:25 PM6/1/18
to munki-...@googlegroups.com
If you're a school, use Mosyle. It offers one platform (macOS or iOS, but not both) for free. If you like it, you can pay for it, and it's fairly affordable.

Mosyle can also deploy Munki.

Alan Siu
Client Systems Analyst
St. Ignatius College Preparatory


On Fri, Jun 1, 2018 at 11:37 AM Dieu Volkanos <dieuvo...@gmail.com> wrote:
I confirm that I use Profile Manager with apple school manager. We are a school so I tried to use the free solution before paying. I run profile manager many years without no problem before the major change of APPLE.


--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/7e6d914a-21de-48d7-8500-487bdfd827f9%40googlegroups.com.

Vaughn Miller

unread,
Jun 1, 2018, 2:42:09 PM6/1/18
to munki-...@googlegroups.com
Using Profile Manager as your MDM is pretty limiting.  I do not think Profile Manager allows you to deploy packages (like Munki) to macOS clients.  You could use something like https://github.com/munki/bootstrappr  as a somewhat manual alternative.


Vaughn

On Fri, Jun 1, 2018 at 2:37 PM, Dieu Volkanos <dieuvo...@gmail.com> wrote:
I confirm that I use Profile Manager with apple school manager. We are a school so I tried to use the free solution before paying. I run profile manager many years without no problem before the major change of APPLE.

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/7e6d914a-21de-48d7-8500-487bdfd827f9%40googlegroups.com.

Adam M. Anklewicz

unread,
Jun 1, 2018, 2:45:57 PM6/1/18
to munki-...@googlegroups.com
As Vaughan said, I just looked through Profile Manager and I can't seem to find a way to get it to send out a PKG file.


Keep in mind if you go with another MDM, you will also need to sign the munkitools pkg. That requires a Developer account. https://blog.eriknicolasgomez.com/2017/03/08/Custom-DEP-Part-2-Creating-a-custom-package-and-deploying-Munki/

Gregory Neagle

unread,
Jun 1, 2018, 2:46:58 PM6/1/18
to munki-...@googlegroups.com
On Jun 1, 2018, at 11:45 AM, Adam M. Anklewicz <ad...@anklewicz.com> wrote:

As Vaughan said, I just looked through Profile Manager and I can't seem to find a way to get it to send out a PKG file.

It does not support that functionality. Several (many?) MDMs do not. Another notable one: Jamf's MDM.

Dieu Volkanos

unread,
Jun 1, 2018, 3:00:40 PM6/1/18
to munki-discuss
Thanks for help!!

I see that it's possible to run more than one mdm.

Example: Profile manager for ios and Mosyle free version for mac os.

Do I have to pay for a second APNS certificates or other thing? I think I read in the pass... Apple Server come with one free APNS push certificates, but I'm not sure.
Reply all
Reply to author
Forward
0 new messages