On Oct 27, 2021, at 8:22 AM, 'miawri' via munki-dev <munk...@googlegroups.com> wrote:"If that doesn’t work, I’ve done a proof-of-concept tool that temporarily grants admin to a user, launches the “Install macOS Foo.app”, then removes admin when that app exits. Perhaps that approach is a better use of my time."I would be hugely in favour of this approach if it is doable but understand that it may not be worth it if it won't work in the next iteration of macOS.Can the installer not be launched by root with the volume owner's password or would that need a cleartext password? Would this be a simpler approach if possible? Just spitballing...
-MikeOn Tuesday, 26 October 2021 at 23:22:58 UTC+1 gregn...@mac.com wrote:As you may be aware, on Apple silicon, running `startosinstall` to upgrade macOS now requires the credentials of a “Volume Owner”. This means that Munki cannot currently upgrade Apple silicon Macs from Big Sur to Monterey.
I plan to experiment with extending the current authrestartd process (with a probable name change instead) to be able to store the username and password of a volume owner, and then also to be able to run startosinstall with those credentials on Apple silicon.
1) No automated updates of macOS via Munki, as user interaction will be required to get the credentials
2) Possible failure modes if the current user is not a volume owner
Given the restrictions/limitations, I wonder if this is then ultimately worth the effort. If the user is a volume owner and admin user, they could just run the “Install macOS Monterey.app” directly.
If they are not an admin user, they might be able to trigger an upgrade from System Preferences->Software Update.
If that doesn’t work, I’ve done a proof-of-concept tool that temporarily grants admin to a user, launches the “Install macOS Foo.app”, then removes admin when that app exits. Perhaps that approach is a better use of my time.
Ultimately Apple wants us to either interactively use “Install macOS Foo.app” or rely on MDM to trigger OS upgrades, so I hesitate to build anything particularly complex that Apple is going to break in a year.
Curious about others’ thoughts here.
Find related discussion groups here:
You received this message because you are subscribed to the Google Groups "munki-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-dev+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-dev/ce63576a-a4aa-41ea-bb7c-51f22577d615n%40googlegroups.com.
El 27 oct 2021, a las 17:47, 'Gregory Neagle' via munki-dev <munk...@googlegroups.com> escribió:
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-dev/68783020-B9EC-46E0-B374-4530B23AE777%40mac.com.
On Oct 27, 2021, at 1:55 PM, Gregory Neagle <gregn...@mac.com> wrote:
Appreciate the feedback.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-dev/A6178EFF-C342-4463-A57B-0F5686E13CD6%40mac.com.