Upcoming changes -- testing needed!

65 views
Skip to first unread message

Gregory Neagle

unread,
May 24, 2021, 7:13:59 PM5/24/21
to munki-dev, 'Gregory Neagle' via munki-discuss
The Munki5dev branch has accumulated a non-trivial number of changes, and so a beta of Munki 5.5 is not far off.

Some of the changes:

  - A new method of finding client certs for mTLS: https://github.com/munki/munki/pull/1077 (Thanks to @np5)
  - This also addresses some issues around client certs some admins reported when upgrading to macOS 11.3 or later.
  - This required the addition of asn1crypto to the Python framework
  - Related: a new option for the Munki package build script to include a client cert package: https://github.com/munki/munki/pull/1091 (Thanks to @np5)

  - UI change: when there are no optional installs defined, all labels other than Updates are hidden: https://github.com/munki/munki/pull/1089 (Thanks to @macmule)

  - When the InstallAppleSoftwareUpdates preference is True on Apple silicon:
    - Munki will not actually attempt to install any Apple updates on Apple silicon
    - Managed Software Center will now display pending Apple updates and direct users to install them using the Software Update pane in System Preferences
    - "Encouragement" as described here will happen on Apple silicon for Apple updates as well as "Munki" updates: https://github.com/munki/munki/wiki/aggressive-update-notifications-in-munki-5 

  - Bumped the Python version to 3.9.5 (from 3.9.4)

I hope to get a beta release out this week, but if you have the time and ability to test now, please do.

-Greg

Gregory Neagle

unread,
May 24, 2021, 7:26:22 PM5/24/21
to munki-...@googlegroups.com, munki-dev
Fixing a mistake...

This change:

a new option for the Munki package build script to include a client cert package: https://github.com/munki/munki/pull/1091

was actually from @rrenstrom

-Greg

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/FE8C46CC-B697-43C8-8A75-E085285513F1%40mac.com.

Gregory Neagle

unread,
May 25, 2021, 1:54:49 PM5/25/21
to munki-dev, 'Gregory Neagle' via munki-discuss

ma...@umich.edu

unread,
May 26, 2021, 10:26:48 AM5/26/21
to munki-dev

So this is a sample size of one, but we pushed this beta out to the systems I test here running 10.14, 10.15, 11 on Intel and 11 on M1 (all with the current macOS builds as of this week -- so 11.4, etc...)

On the M1 -- only --  I'm getting a prompt to install "Important Apple Updates", but clicking "Install now" launches Software Update sys pref -- but there are no new updates listed there.    

There shouldn't be any difference in how we deploy munki to these OSes, so I thought I'd ask if this is a bug with 5.5.0b1?   The previous prod release was not doing this.
Screen Shot 2021-05-26 at 10.26.25 AM.png

Gregory Neagle

unread,
May 26, 2021, 10:33:34 AM5/26/21
to munk...@googlegroups.com
What is displayed in the Software Update preferences pane is not under Munki’s control or influence. If you aren’t seeing what you expect there — that’s an Apple bug :-(

Sent from my iPhone

On May 26, 2021, at 7:26 AM, ma...@umich.edu <ma...@umich.edu> wrote:


--
Find related discussion groups here:
https://github.com/munki/munki/wiki/Discussion-Group
---
You received this message because you are subscribed to the Google Groups "munki-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-dev+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-dev/c7e87cac-507e-4a77-8a9c-5807b61f0775n%40googlegroups.com.
<Screen Shot 2021-05-26 at 10.26.25 AM.png>

ma...@umich.edu

unread,
May 26, 2021, 10:53:34 AM5/26/21
to munki-dev
Well, I'm not expecting *anything* to be showing in Software Update on the M1 as it's fully patched (softwareupdate -l -a shows nothing, too) -- that's what's confusing us.    We don't know what Munki is flagging here on the M1 that it's not on Intel.

Gregory Neagle

unread,
May 26, 2021, 11:01:51 AM5/26/21
to munki-dev
Are you saying that Managed Software Center is not showing any pending Apple updates, yet when you try to quit, it prompts you to install "Important Apple Updates"?

I'm not seeing behavior like that on an M1 13" MBP.

I think we need a clearer description of the issue you are reporting.

-Greg

ma...@umich.edu

unread,
May 26, 2021, 11:06:39 AM5/26/21
to munki-dev
That's it exactly:   MSC is not showing me any Apple updates on my M1 (as indicated in the screen shot in my post), yet if I try to install another app listed, I'm getting prompted to install "Important Apple Updates".  (M1 13" Air -- not in any beta seed)

I'm reloading another M1 on 11.4 with prod Munki and will update to the beta after that and report if it happens there, too.

Gregory Neagle

unread,
May 26, 2021, 11:10:13 AM5/26/21
to munki-dev
That's different from what I described, but enough for me to try to replicate.

Specifics are always helpful!

-Greg

Gregory Neagle

unread,
May 26, 2021, 11:23:37 AM5/26/21
to munki-dev
And with the additional detail, I can replicate this issue.

-Greg

ma...@umich.edu

unread,
May 26, 2021, 11:29:47 AM5/26/21
to munki-dev
Solid!

Gregory Neagle

unread,
May 26, 2021, 11:31:46 AM5/26/21
to munki-dev
Reply all
Reply to author
Forward
0 new messages