Installed application via pkg not being detected properly to uninstall.

227 views
Skip to first unread message

Eric Holtam

unread,
Jan 26, 2016, 3:02:15 PM1/26/16
to munki-discuss
I've run into an issue where installed software isn't being detected to uninstall and was wondering if there's something I'm missing or if someone could cast an eye on this as well.

I've installed Cisco's AnyConnect VPN software via munki using installer_choices_xml to selectively install just one of 8 available pkgs in the installer (pkginfo file at https://gist.github.com/poundbangbash/97ade04901c4dfcc94dd). The pkginfo file has the receipt of the one pkg installed in its receipts key. Everything works fine with the software on the client and there's no looping so munki is satisfied that the software is properly installed.

Now I want to uninstall it as that software is not necessary anymore.  pkgutil shows the pkg receipt name and version match the receipts key of the pkginfo file (https://gist.github.com/poundbangbash/a6c34333f2beb4e7499b) However when I remove the software from managed_installs and add it to the managed_uninstalls section of a manifest, verbose logs show "Installed receipts don't match."  I've run managedsoftwareupdate -vvvvv but the most output regarding this is:

    * Processing manifest item CiscoAnyConnectMSL for removal
    Looking for all items matching: CiscoAnyConnectMSL...
    Adding item CiscoAnyConnectMSL, version 3.1.05187 from catalog production...
    Adding item CiscoAnyConnectMSL, version 4.2.00096 from catalog production...
    Considering item CiscoAnyConnectMSL-4.2.00096 for removal info
    Checking receipts...
    Installed receipts don't match.
    CiscoAnyConnectMSL-4.2.00096 not installed.
    Considering item CiscoAnyConnectMSL-3.1.05187 for removal info
    Checking receipts...
    Installed receipts don't match.
    CiscoAnyConnectMSL-3.1.05187 not installed.
    CiscoAnyConnectMSL doesn't appear to be installed.
    **Checking for implicit removals**

There are two versions of the software "CiscoAnyConnectMSL" in the repo.  Both are in the same catalog and named the same so only 4.2.00096 is installed on the system.

I tried changing the uninstall_method from 'removepackages' to 'uninstall_script' but that didn't change the outcome.  It never flags the software to uninstall.

I'm baffled as to why it won't detect as needing to be removed via the pkg receipt when the same pkg receipt satisfies that it is already installed. 

Has anyone run into this before or have insight on this behavior?

Thanks,
Eric

Gregory Neagle

unread,
Jan 26, 2016, 3:05:41 PM1/26/16
to munki-...@googlegroups.com
What are the receipts in CiscoAnyConnectMSL, version 3.1.05187 ?

--
You received this message because you are subscribed to the Google Groups "munki-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-discus...@googlegroups.com.
To post to this group, send email to munki-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/munki-discuss/f9d1f38b-f925-447b-aba5-f8e7e0f6d696%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Eric Holtam

unread,
Jan 26, 2016, 3:09:09 PM1/26/16
to munki-discuss
There are three extra besides the one matching between the two versions.

<array>
<dict>
<key>installed_size</key>
<integer>12252</integer>
<key>packageid</key>
<string>com.cisco.pkg.anyconnect.vpn</string>
<key>version</key>
<string>3.1.05187</string>
</dict>
<dict>
<key>installed_size</key>
<integer>3104</integer>
<key>packageid</key>
<string>com.cisco.pkg.anyconnect.websecurity</string>
<key>version</key>
<string>3.1.05187</string>
<key>optional</key>
<true/>
</dict>
<dict>
<key>installed_size</key>
<integer>1457</integer>
<key>packageid</key>
<string>com.cisco.pkg.anyconnect.dart</string>
<key>version</key>
<string>3.1.05187</string>
<key>optional</key>
<true/>
</dict>
<dict>
<key>installed_size</key>
<integer>6211</integer>
<key>packageid</key>
<string>com.cisco.pkg.anyconnect.posture</string>
<key>version</key>
<string>3.1.05187</string>
<key>optional</key>
<true/>
</dict>
</array>

Eric Holtam

unread,
Jan 26, 2016, 3:24:31 PM1/26/16
to munki-discuss
I think I see where this is going and have removed version 3.1.05187 from the repo.  Now the software is properly detecting that it needs to be uninstalled.  

-Eric
Reply all
Reply to author
Forward
0 new messages