MSU prompts to install security update after downloading OS installer

7 views
Skip to first unread message

Vincent de Graaff

unread,
Feb 17, 2023, 10:30:16 AM2/17/23
to munki-discuss
Hi all,

I just noticed upon trying to start an OS upgrade through munki now that 11.7.4 and 12.6.4 are released, that Managed Software Center will prompt the user to install the available security update for the current system even though that's hidden from view as soon as the OS upgrade has finished downloading.

This will cause the user to click "Install Apple updates now", followed by clicking on "upgrade now" next to the same icon they've been seeing in MSU, and downloading another 12GB+ copy of the installer they can't actually install.
This happens both on normal and staged installs. 

Is this a bug, or is there something we can change on our end other than disabling the check for apple updates?

Thanks!

Greg Neagle

unread,
Feb 17, 2023, 11:39:27 AM2/17/23
to 'Gregory Neagle' via munki-discuss
This might be a bug, or not.

If one of more items to be installed is marked as an “apple_item”, Munki will not check for Apple updates, in an attempt to prevent this sort of problem.

In looking at my repo, I notice that my current InstallVentura item for Intel is marked as an apple_item, but my InstallVentura item for AppleSilicon is not.


So:

If your “OS upgrade” item _does_ have apple_item set to true, and Munki is still checking for Apple updates and MSC is prompting for them, then there is probably a bug to be addressed here around this behavior.

If your “OS upgrade” item _does not_ have apple_item set to true, add that key and value to the pkginfo and retest your scenario.

As a side-issue, the code that creates a stage_os_installer pkginfo item should probably also set apple_item to true.

-Greg

Vincent de Graaff

unread,
Feb 20, 2023, 11:29:43 AM2/20/23
to munki-discuss
Hi Greg,

Thanks, that's an easy one to miss when you're running 9 plists for three OS versions.
I've added the key to the plists where it was missing. This seems to have solved it for the staged install, but for the regular install it still wants to redirect me to System Preferences.

Going with the staged installer for all versions is definitely an option for us, so unless it's a quick fix or if it's a bother to more users I wouldn't give it the highest priority :)
I'm guessing OS upgrades will be far more streamlined and intuitive from Monterey onward anyways.

Thanks for the help so far!


Op vrijdag 17 februari 2023 om 17:39:27 UTC+1 schreef Gregory Neagle:
Reply all
Reply to author
Forward
0 new messages