Apple Soft. Updates not shown in MSC GUI

123 views
Skip to first unread message

Anthony Palina

unread,
Sep 23, 2021, 2:56:41 PM9/23/21
to munki-discuss
With the release of Safari on Sept 20, MSC has stopped showing, and silently installing, Apple Software Updates not requiring a restart on Big Sur Macs. ManagedSoftwareUpdate.log shows it is checking for Apple updates, seeing those updates, downloading those updates, but they never show up as being available in the GUI and never get installed silently when conditions permit.

Catalina clients continue to work as expected, showing the updates and silently installing those that don't require a restart.

So far, I've seen this on both 11.6 clients and on an 11.5.2 client. Surprisingly, the macOS 11.6 update shows up in MSC for the 11.5.2 client but the Safari 15.0 update does not. There is a "WARNING: No dist file for product 002-02865." in ManagedSoftwareUpdate.log after "Downloaded Safari. Done." UnattendedAppleUpdates is set to true via a Config Profile from our MDM and the Big Sur clients are still showing that profile as being installed.

I've re-installed munki tools atop a Mac exhibiting this behavior and that changed nothing. Has anybody else experienced this and, if so, found a workaround?

Gregory Neagle

unread,
Sep 23, 2021, 3:56:19 PM9/23/21
to munki-...@googlegroups.com
Sound like this might be better described as “recent Safari update not displayed in MSC.app” because it sounds like that’s the only one so far…

Sent from my iPhone

On Sep 23, 2021, at 11:56 AM, Anthony Palina <pal...@uwosh.edu> wrote:


--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/f27024b5-142f-42e3-86a8-1183f6ae1fffn%40googlegroups.com.

Anthony Palina

unread,
Sep 24, 2021, 11:00:44 AM9/24/21
to munki-discuss
My apologies.

Additionally, Command Line Tools for Xcode 13, released on September 20, 2021, exhibits the same behavior as the Safari update. It throws a "No dist file for product 001-49060" into ManagedSoftwareUpdate.log and then does not display the update in the MSC GUI.

Snippit below:

Sep 24 2021 09:38:53 -0500 ###    End managed software check    ###
Sep 24 2021 09:38:53 -0500     Allowing idle sleep
Sep 24 2021 09:38:53 -0500 Checking Apple Software Update catalog...
Sep 24 2021 09:38:53 -0500 Checking for available Apple Software Updates...
Sep 24 2021 09:38:54 -0500     Finding available software
Sep 24 2021 09:39:04 -0500     Attempting to quit apps: (
Sep 24 2021 09:39:04 -0500     "com.apple.Safari.SafariQuickLookPreview",
Sep 24 2021 09:39:04 -0500     "com.apple.Safari"
Sep 24 2021 09:39:04 -0500     )
Sep 24 2021 09:39:04 -0500     Waiting for user to quit any relevant apps
Sep 24 2021 09:39:04 -0500     Downloaded Safari
Sep 24 2021 09:39:05 -0500     Downloading Command Line Tools for Xcode
Sep 24 2021 09:39:35 -0500     Downloaded Command Line Tools for Xcode
Sep 24 2021 09:39:35 -0500     Done.
Sep 24 2021 09:39:47 -0500 WARNING: No dist file for product 001-49060
Sep 24 2021 09:39:48 -0500 WARNING: No dist file for product 002-02865
Sep 24 2021 09:39:48 -0500 Finishing...
Sep 24 2021 09:39:48 -0500 Saving application inventory...
Sep 24 2021 09:39:54 -0500     Performing postflight tasks...
Sep 24 2021 09:39:54 -0500 ### Ending managedsoftwareupdate run ###

For comparison, here's a log snippit of a Big Sur client that needs both the 11.6 update and the Safari update from ASU:

Sep 24 2021 08:49:15 -0500 Checking Apple Software Update catalog...
Sep 24 2021 08:49:21 -0500 WARNING: No dist file for product 002-02865
Sep 24 2021 08:49:21 -0500 Apple Update product directory MSU_UPDATE_20G165_patch_11.6 is missing
Sep 24 2021 08:49:21 -0500 Downloaded updates do not match our list of available updates.
Sep 24 2021 08:49:21 -0500 Checking for available Apple Software Updates...
Sep 24 2021 08:49:22 -0500     Finding available software
Sep 24 2021 08:49:27 -0500     Downloading macOS Big Sur 11.6
Sep 24 2021 08:49:27 -0500     Downloaded: macOS Big Sur 11.6
Sep 24 2021 08:49:27 -0500     Attempting to quit apps: (
Sep 24 2021 08:49:27 -0500     "com.apple.Safari.SafariQuickLookPreview",
Sep 24 2021 08:49:27 -0500     "com.apple.Safari"
Sep 24 2021 08:49:27 -0500     )
Sep 24 2021 08:49:27 -0500     Waiting for user to quit any relevant apps
Sep 24 2021 08:49:27 -0500     Downloaded Safari
Sep 24 2021 08:49:27 -0500     Done.
Sep 24 2021 08:49:28 -0500     Skipping metadata caching for product ID MSU_UPDATE_20G165_patch_11.6
Sep 24 2021 08:49:28 -0500     **Checking for Apple Update Metadata**
Sep 24 2021 08:49:28 -0500     
Sep 24 2021 08:49:28 -0500     The following Apple Software Updates are available to install:
Sep 24 2021 08:49:28 -0500         + macOS Big Sur 11.6-11.6
Sep 24 2021 08:49:28 -0500            *Restart required
Sep 24 2021 08:49:28 -0500            *Must be manually installed
Sep 24 2021 08:49:28 -0500     Checking if /System/Library/CoreServices/FileSyncAgent.app is running...
Sep 24 2021 08:49:28 -0500 No GUI users, installing at login window.
Sep 24 2021 08:49:28 -0500 Finishing...
Sep 24 2021 08:49:28 -0500 Saving application inventory...
Sep 24 2021 08:49:31 -0500     Performing postflight tasks...
Sep 24 2021 08:49:31 -0500 ### Ending managedsoftwareupdate run ###

Despite the "installing at login window", an hour later:

Sep 24 2021 09:57:29 -0500 Checking Apple Software Update catalog...
Sep 24 2021 09:57:36 -0500 WARNING: No dist file for product 002-02865
Sep 24 2021 09:57:36 -0500 Apple Update product directory MSU_UPDATE_20G165_patch_11.6 is missing
Sep 24 2021 09:57:36 -0500 Downloaded updates do not match our list of available updates.
Sep 24 2021 09:57:36 -0500 Checking for available Apple Software Updates...
Sep 24 2021 09:57:37 -0500     Finding available software
Sep 24 2021 09:57:43 -0500     Downloading macOS Big Sur 11.6
Sep 24 2021 09:57:43 -0500     Downloaded: macOS Big Sur 11.6
Sep 24 2021 09:57:43 -0500     Attempting to quit apps: (
Sep 24 2021 09:57:43 -0500     "com.apple.Safari.SafariQuickLookPreview",
Sep 24 2021 09:57:43 -0500     "com.apple.Safari"
Sep 24 2021 09:57:43 -0500     )
Sep 24 2021 09:57:43 -0500     Waiting for user to quit any relevant apps
Sep 24 2021 09:57:43 -0500     Downloaded Safari
Sep 24 2021 09:57:43 -0500     Done.
Sep 24 2021 09:57:43 -0500     Skipping metadata caching for product ID MSU_UPDATE_20G165_patch_11.6
Sep 24 2021 09:57:44 -0500     **Checking for Apple Update Metadata**
Sep 24 2021 09:57:44 -0500     
Sep 24 2021 09:57:44 -0500     The following Apple Software Updates are available to install:
Sep 24 2021 09:57:44 -0500         + macOS Big Sur 11.6-11.6
Sep 24 2021 09:57:44 -0500            *Restart required
Sep 24 2021 09:57:44 -0500            *Must be manually installed
Sep 24 2021 09:57:44 -0500     Checking if /System/Library/CoreServices/FileSyncAgent.app is running...
Sep 24 2021 09:57:44 -0500 No GUI users, installing at login window.
Sep 24 2021 09:57:44 -0500 Finishing...
Sep 24 2021 09:57:44 -0500 Saving application inventory...
Sep 24 2021 09:57:46 -0500     Performing postflight tasks...
Sep 24 2021 09:57:47 -0500 ### Ending managedsoftwareupdate run ###

Gregory Neagle

unread,
Sep 24, 2021, 11:45:06 AM9/24/21
to munki-...@googlegroups.com
So: “Some recent Apple updates not displaying in Managed Software Center on Big Sur” ?

I’m betting Apple has moved these updates from the “classic” SoftwareUpdate mechanism to the (ported from iOS) MobileSoftwareUpdate mechanism…

What is the output of `softwareupdate -l` on machines in this state?

-Greg

Gregory Neagle

unread,
Sep 24, 2021, 10:29:33 PM9/24/21
to munki-...@googlegroups.com
$ sudo softwareupdate -l
Software Update Tool

Finding available software
Software Update found the following new or updated software:
* Label: Command Line Tools for Xcode-13.0
Title: Command Line Tools for Xcode, Version: 13.0, Size: 528803K, Recommended: YES, 

and

defaults read /Library/Preferences/com.apple.SoftwareUpdate RecommendedUpdates
(
        {
        "Display Name" = "Command Line Tools for Xcode";
        "Display Version" = "13.0";
        Identifier = "Command Line Tools for Xcode";
        "Product Key" = "001-49060";
    }
)

So the ProductKey for "Command Line Tools for Xcode-13.0” is "001-49060”.


This confuses Munki, and a symptom is

WARNING: No dist file for product 001-49060

And Munki then does not list the update.

Yet the update _is_ cached in /Library/Updates:

$ ls /Library/Updates/
001-49060 PreflightContainers ProductMetadata.plist index.plist

which means it is not coming from the new MobileSoftwareUpdate mechanism.

I assume the Safari 15 is similar. I’m assuming the ProductKey is 002-02865, and that ProductKey is nowhere to be found in the BigSur sucatalog.

So all I can conclude at present is that Apple has made an unexpected change to how softwareupdate works and Munki will need to be adapted to deal with it. Or perhaps we accellerate our journey of unwinding Munki from handling Apple updates at all since Apple is making it harder and less useful to try to integrate with Apple Software Update.

-Greg

Gregory Neagle

unread,
Sep 24, 2021, 10:36:58 PM9/24/21
to 'Gregory Neagle' via munki-discuss
Both product keys appear in the sucatalog at  https://swscan.apple.com/content/catalogs/others/index-10.16-10.15-10.14-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

Both of these catalogs exist:


and until recently they were identical. We did not know which URL macOS BigSur’s SoftwareUpdate actually used to check for updates, and we guessed that the first one was the right one since the product is officially macOS 11.

1) We guessed wrong.
2) It didn’t matter because until recently the contents of the two catalogs was identical.

:-(

-Greg

Gregory Neagle

unread,
Sep 24, 2021, 10:46:24 PM9/24/21
to munki-...@googlegroups.com
After changing the sucatalog URL Munki is using:

    Downloaded Command Line Tools for Xcode...
    Done.
    Caching metadata for product ID 001-49060...
0..20..40..60..80..100
    Caching package metadata for product ID 001-49060...
0..20..40..60..80..100
    Caching package metadata for product ID 001-49060...
0..20..40..60..80..100
    Caching package metadata for product ID 001-49060...
0..20..40..60..80..100
    Caching English distribution for product ID 001-49060...
    
    The following Apple Software Updates are available to install:
        + Command Line Tools for Xcode-13.0
    
and it shows in Managed Software Center as well:

This fix will be in the next release of Munki.

-Greg

Anthony Palina

unread,
Sep 27, 2021, 10:34:00 AM9/27/21
to munki-discuss
Sorry for the radio silence for days.

But yes, they would show up in a "softwareupdate -l" and were installable via command line "softwareupdate -i -r -a". They'd also show up in System Preferences -> Software Update.

Thank you for uncovering it. Your efforts are extremely appreciated.

Gregory Neagle

unread,
Sep 27, 2021, 2:42:45 PM9/27/21
to munki-...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages