Unable to install a particular app using Munki

[Aakash Gupta]

Case:
Currently we have an application (Adobe Reader DC) and with pre and post install script already imbedded in it.
Whenever we are trying Munki to install it then it shows as successfully installed (from MSU logs) but the package shows as corrupted.
When we try to manually install (outside Munki) the package then it installs fine, and we are able to use the application.

From the install logs we are seeing permissions related issue whenever the embedded post install script runs.

Also, if I just copy the post and preinstall script from the package and add it to the munki scripts then it works but our use case is that package is executed with the scripts not being exposed to the end user.

[Gregory Neagle]

"file://localhost/Library/Application%20Support/AirWatch/Data/Munki/Managed%20Installs/Cache/Adobe%20AcrobatReaderDC-23.008.20533.pkg”

This looks like you are using Workspace ONE’s embedded Munki solution. I’d suggest asking Workspace ONE for support here. I suspect I know what’s going on, but I don’t think it’s fair for the WS1 folks to dump support tasks to volunteers.

-Greg

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/47f0f26e-5726-4f4d-8bb3-229993f0e734n%40googlegroups.com.
<Installlogs using munki.md><results on manual and munki install.docx><install log manual install.md><msu munki logs.txt>

[Aakash Gupta]

I tried with Vanilla munki as well and same results hence I reverted here.

[Gregory Neagle]

With an install of a signed version of “vanilla” Munki, what happens if managedsoftwareupdate is granted Full Disk Access via a TCC configuration profile?

Sent from my iPhone

On Oct 9, 2024, at 10:36 AM, Aakash Gupta <aakas...@gmail.com> wrote:

I tried with Vanilla munki as well and same results hence I reverted here.

To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/f64b4aeb-4262-4782-b7c1-82b6c0f152b0n%40googlegroups.com.

[Aakash Gupta]

Ok, I have just tried it.
Same results

This is the config profile I am using is this

[Gregory Neagle]

I can’t reproduce your issue.

I used Munki to install Adobe Reader DC 24.003.20112. It installed seemingly successfully and launched normally.

Two things of note: 

I use this Autopkg recipe to import Adobe Reader into Munki: 

https://github.com/autopkg/recipes/blob/master/AdobeReader/AdobeReader.munki.recipe

The recipe sets up a preinstall_script:

<key>preinstall_script</key>

<string>#!/bin/sh

if [ -e "/Applications/Adobe Acrobat Reader.app" ]; then

rm -r "/Applications/Adobe Acrobat Reader.app"

fi

if [ -e "/Applications/Adobe Acrobat Reader DC.app" ]; then

rm -r "/Applications/Adobe Acrobat Reader DC.app"

fi

exit 0

</string>

That simply removes any pre-existing app before installing the current one. Perhaps doing this will resolve your issue as well.

-Greg

To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/1e8a451b-5b57-4d29-8a9a-86fc40c97e28n%40googlegroups.com.
<test.mobileconfig>

[Aakash Gupta]

I have a custom package. I will share it with you once I have permission.

I tried to do it your way and same results. It's not working for me.

From the logs I can see its permission related. I am checking with the profiles once. If not then I will share the package.
I tried with WS1 and with Vanilla Munki both had same results hence I reached out here to fix it. 

[Gregory Neagle]

No promises that I can find the time to look at your custom package. But perhaps others in this group will be interested. 

Sent from my iPhone

On Oct 9, 2024, at 11:31 AM, Aakash Gupta <aakas...@gmail.com> wrote:

I have a custom package. I will share it with you once I have permission.

To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/51ad2dd3-a249-443e-af10-d2261927c82fn%40googlegroups.com.

[Aakash Gupta]

Hey,
Thanks a lot. The TCC profile worked.