##osx-server

i also got rid of a few other launchdaemons left over from some old apps, not sure if those were related

Hello. I'm a linux administrator. However, I was handed a thousand macs to administer. (No management infrastructure currently exists yet) I don't know macs, or the underlying infrastructure. In my research thus far, I'm considering using puppet and munki for management. Does anybody have any recommendations, or particular resources/references that I may look into to understand the underlying structure to assist with my management goal

s?

hfike: the thing is, there's no related plist, e.g., com.apple.pboard.plist, and i cant seem to, for the life of me, locate the com.apple.pboard daemon itself

nronksr https://www.youtube.com/watch?v=UG84nedo4ag

hi nronksr :)

Ugh. I'm farking blind.

nronksr: References as in "how do I use Munki"?

err com.apple.pboard launchagent

ivydigital might be a different issue. Also look in ~/Library/LaunchAgents

foigus, no, reference as in... I use xyz for management and I find it very good... heres a resource, OR... any reference to understanding the underlying belly of a mac. ie: control files, etc. ie: in linux, most control files are held in /etc, /etc/init.d are startups... structure is /usr for apps, /opt for specials, /var for system data, etc.

I think that would be helpful as an undertaking no matter what management tool I choose.

hfike: It's not there, either! Although it would totally make sense for that file to be in that *exact* location as it's a user login issue (resolved by safe mode everytime)

hfike, I'll check out the video, thanks.

nronksr that is a good start for munki for software deployment, deploystudio for imaging, and autopkg for keeping your munki repo up to date automagically

nronksr: This article is a bit dated, but since your question is coming from a Linux -> OS X background, it does cover that aspect https://web.archive.org/web/20110611192641/http...

nronksr: This is much more recent http://launchd.info

nronksr lots of good videos here as well https://www.youtube.com/user/psumacconf/videos

Thanks for the links. I'll check them out today and see what kind of trouble I can get myself into. :)

nronksr: How does one get "handed" a thousand Macs to administrate?

heavily

In a dump truck

semi-trailers, I'm thinking?

and in a building with no lift, and their destination being on the 10th floor?

why I learned rigging

even the devil would make a good sailor if he could tie a bowline

But you supported the arts, it was kinda required

mwohlgemuth: update: no new URL/rss feed for lync 11

but I'm going to manually pull it in to my repo for the folks that use it

hi Allister

yeah i did that too

so update = no update, right?

that page still being available http://www.microsoft.com/en-us/download/details... is good enough for me to push it to the few people who acually use it here

yeah, i imported the dmg into munki

and thats that

but nothing autopkg can do about it without hardcoding a URL to fetch, which goes against the point

if they ever fix their feed, autopkg can resume

but in the meantime i override it manually

lame lync users anyway

srsly

all the cool kids are on hipchat anyway

where you been, IT'S SLACK NOW

tvsutton: speaking of which, thanks for chiming in on Quam's non-PR

tvsutton: btw, did you get a chance to look at my download recipe post draft? https://www.dropbox.com/s/640yeyhg8gzr0jk/autop...

I'm kindof proud of it, took me a good long while to figure out how to make the information small enough to present in a bite-sized piece

mwohlgemuth: is thyere a slack channel for OSX-Server?

dknuth: i wish

Creops: :D

we will prob start using Lync for videochat soon.

by that time it'll be skypeForBusiness!

Creops: boooo

making lync the third brand name MS has killed

on chat products, at least

dknuth: going to use it to connect videoconf and Lync

dknuth: i wish someone started a Slackroom for osx-server

or a AM supportroom ;)

IRC is old school and fun

people think I'm hacking the gibson

but really it's just irssi.

afk

Creops: Le Sigh.

ANother thing Ineed to do

refreshingapathy: the gibson can't be hacked

nickander: root/.workspace/.garbage.

foigus, Well... one walks into an educational institution where (no offense to teachers), but where teachers run the IT department...

I've learned that teachers and IT management infrastructure think differently...

nronksr: nickcageyoudontsay.jpg

also, yeah, that's pretty well known.

right now i'm dealing with a client who is at a major university

and said university staff found out they were installing management software on their computers (Absolute for Macs, SCCM for PCs) and are freaking out because it means IT is spying on them, etc. etc.

so I had to write some whitepapers up explaining exactly how our product is more limited than *literally every other simple process to log into and spy on their machines ever*

Yeah, I find the hardest thing to convey is... we aren't here to hinder them at all, but to actually help them. If I get a chance to explain to the rational ones they understand with a simple analogy... You don't shuffle all your students assignments, for every class, all on top of each other on the desk... you use organization. Management is the same thing they use everyday, but for computers.

nronksr: There definitely are people in this room handling educational environments.

I just use the pencil analogy - you're here to write, we're here to keep your pencils sharp

That's the best I could do to explain to the ones who have an ounce of reason... I find the teachers aren't so bad, it's the administrators who don't get it... (whom are also teachers), which is confusing to me, but.. .*shrug* What do you do.

bruienne: But what if I need a new pencil at 3 a.m. because the creative mood strikes me?

foigus: self service pencils

:-)

That was close to a comment we received when moving to a centralized font distribution/management server and removing the ability for users to add their own fonts

nronksr: i gotta wonder just how much weed some of these folks are doing to be this paranoid.

oh man, paranoid hits the nail on the head...

nronksr: yeah, and paranoid about all the wrong things.

I honestly don't want to know what they had to go through to get that kind of paranoid; It's just so not reality.

Allister: Kind of. It reminded me that since I wrote BrewCaskInfoProvider, that project added fancier support for download URLs that means many recipes based on BrewCaskInfoProvider will no longer work.

It would not be much work to fix, but I'm not aware of anyone actually using that processor

When it comes to people who worry about my spying on them, I try to be as upfront about it as I can - "I have neither the time nor interest in spying on what you're doing."

nronksr: well, higher education is where the burnouts from the Viet Nam hippie era went to die.

soooo

it's the contact high from all that weed, LSD, etc.

tvsutton: I totally found a worthwhile use for preprocessors to enable code verification, I'll add that as a best practice to my own recipes soon

One thing to point out about the BrewCaskInfoProvider is that while it might be a useful shortcut, you're 1) depending on whatever someone else thinks should be the download (and maybe what it contains), and 2) limited to how frequently that cask gets updated, if it's a download URL that changes with every version

Allister: preprocessors for enabling code verification - how so?

tvsutton: the current MunkiCatalog one essentially tickles the input stanza's value for a specific key, yes?

tvsutton: I like brew casks. They make good beer.

Allister: I forget

ha

me too, gotta look back at it!

I didn't write it and Yoann seemed lose interest by the time it was integrated

Or he may have just been impatient with how slow I am to respond to issues

...he was about to start a new company, too

the https://github.com/autopkg/autopkg/blob/master/... just looks for a default catalog and sets it in each munki recipe pkginfo stanza AFAICT

so my idea seems similar/valid, I just look for false in input stanza's for the DISABLE_CODE_VERIF key and set ti to bool true

Allister: Correct about MunkiSetDefaultCatalog

I really think this was an elegant, non-core-autopkg-tooling way to eliminate the need for common overrides

too bad it has pr issues, needs more folks to notice it

But you're missing the point about DISABLE_CODE_VERIF - nobody will be explicitly requiring their recipes to use it. You set it to non-empty/zero if you want to disable code verification, and that's it

i.e. autopkg run -l myrecipes.txt -k DISABLE_CODE_SIGNATURE_VERIFICATION=please

hey elliotjordan

good morning

that's only if folks know they want it off, tho, yes?