Managed software installation for macOS —
This is the official release of Munki 6.3.3, a bug-fix and minor change release of the Munki tools
app_usage_monitor to crash when Munki 6.3.2 was installed. Thanks to @sheagcraig. https://github.com/munki/munki/pull/1184
launchapp tool to normalize usernames to lowercase. Improves compatibility with organizations using Jamf Connect. Thanks to @MScottBlake. https://github.com/munki/munki/pull/1182
munkiimport: When generating a pkginfo filename, if there is a single supported_architecture, this is added to the filename. This makes it easier to distinguish between Intel and Apple silicon pkginfo files for the same product. Thanks to @nmcspadden. https://github.com/munki/munki/pull/1185
A complete list of changes from the 6.3.2 release is here: https://github.com/munki/munki/compare/v6.3.2...v6.3.3
The GUI apps and the Python framework were built under Xcode 14.3 on macOS 13.5. Other versions of Xcode have not been tested and may cause different results.
Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are made available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.
The munkitools-6.3.3.4593.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation. A signed and notarized version of this package should be available eventually at https://github.com/macadmins/munki-builds/releases.
This is the official release of Munki 6.3.2, a bug-fix and minor change release of the Munki tools.
A complete list of changes from the 6.3.1 release is here: https://github.com/munki/munki/compare/v6.3.1...v6.3.2
The GUI apps and the Python framework were built under Xcode 14.3 on macOS 13.4.1. Other versions of Xcode have not been tested and may cause different results.
Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are made available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.
The munkitools-6.3.2.4588.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation. A signed and notarized version of this package should be available eventually at https://github.com/macadmins/munki-builds/releases.
This is the official release of Munki 6.3.1, a bug-fix release of the Munki tools.
A complete list of changes from the 6.3 release is here: https://github.com/munki/munki/compare/v6.3.0...v6.3.1
The GUI apps and the Python framework were built under Xcode 14.3 on macOS 13.3.1. Other versions of Xcode have not been tested and may cause different results.
Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are made available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.
The munkitools-6.3.1.4580.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation. A signed and notarized version of this package should be available eventually at https://github.com/macadmins/munki-builds/releases.
This is the official release of Munki 6.3, a enhancement release of the Munki tools.
/usr/local/munki/managedsoftwareupdate is now a compiled binary. This makes it much easier to grant Munki PPPC/TCC permissions (like Full Disk Access) without having to grant too-wide permissions to /usr/sbin/installer or to Munki's embedded Python.
In the package attached to this release, the binary is ad-hoc-signed only. You can create a PPPC/TCC configuration profile with the ad-hoc signature, but the designated requirement will change with each build/release. Consider signing the binary with your own Developer ID, or using the build at https://github.com/macadmins/munki-builds/releases.make_munki_mpkg.sh script has been updated to (optionally) sign the managedsoftwareupdate binary. Thanks to @korylprince. https://github.com/munki/munki/commit/9006c818e8037ff263f01eea776edd2a3f52422f
make_munki_mpkg.sh script has been updated to (optionally) sign the Python framework, and to sign the applications in a way more compatible with notarization. Thanks to @erikng (https://github.com/munki/munki/commit/6c27df483175787be2c6ccf219e61fa606900112)/usr/sbin/installer was executed via a launchd job. This worked around issues seen with Microsoft Office installers many years ago. This arrangement breaks the proper determination of the "responsible process" for PPPC/TCC protections. (Since launchd is directly launching installer the responsible process is installer itself.) So in this release, /usr/sbin/installer is now run via the Python subprocess module. It is possible (though unlikely) this might cause some packages that previously could be successfully installed via Munki to fail. If you encounter this, please file an issue.managedsoftwareupdate wrapper, as 10.13 is the lowest macOS version supported for deployment by Xcode 14. Functionally, this means dropping official support for macOS < 10.13, though the code may be able to be built successfully on older versions of Xcode and older macOS versions.A complete list of changes from the 6.2.1 release is here: https://github.com/munki/munki/compare/v6.2.1...v6.3.0 A complete list of changes from 6.3 beta 3 is here: https://github.com/munki/munki/compare/v6.3.0b3...v6.3.0
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.3.1. Other versions of Xcode have not been tested and may cause different results.
Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are made available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.
The munkitools-6.3.0.4574.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation. A signed and notarized version of this package should be available eventually at https://github.com/macadmins/munki-builds/releases.
This is the first beta of Munki 6.3, a enhancement release of the Munki tools.
/usr/local/munki/managedsoftwareupdate is now a compiled binary. This makes it much easier to grant Munki PPPC/TCC permissions (like Full Disk Access) without having to grant too-wide permissions to /usr/sbin/installer or to Munki's embedded Python.
In this release, the binary is ad-hoc-signed only. You can create a PPPC/TCC configuration profile with the ad-hoc signature, but the designated requirement will change with each build/release. Consider signing the binary with your own Developer ID. Hopefully in the future we may be able to provide a pre-signed binary./usr/sbin/installer was executed via a launchd job. This worked around issues seen with Microsoft Office installers many years ago. This breaks the proper determination of the "responsible process" for PPPC/TCC protections. So in this release, /usr/sbin/installer is now run via the Python subprocess module. It is possible (though unlikely) this might cause some packages they previously could be successfully installed via Munki to fail. If you encounter this, please file an issue.A complete list of changes from the 6.2.1 release is here: https://github.com/munki/munki/compare/v6.2.1...v6.3.0b1
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.2.1. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.3.0.4557.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.
This is the official release of Munki 6.2.1, a bug-fix release for the Munki tools.
managedsoftwareupdate --show-config will now display the value of the AppleSoftwareUpdatesIncludeMajorOSUpdates preference, introduced in Munki 6.1. https://github.com/munki/munki/commit/139e2d3f5646c73f721ff0403517e1f8ac552937
A complete list of changes from version 6.2 is here: https://github.com/munki/munki/compare/v6.2.0...v6.2.1
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.2.1. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.2.1.4545.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.
This is the official release of Munki 6.2, a release that adds new features and improvements to the Munki tools.
This is the same build as 6.2.0b1. There have been no changes since that beta.
/usr/sbin/installer. This improves the success rate for installs of recent Adobe Admin Console packages./usr/sbin/installer. This improves the success rate for using Adobe uninstall packages to remove Adobe software.munkiimport/makepkginfo now support a new --adobe option to revert to pre-Munki 6.2 behavior when importing Adobe CCP/Admin Console packages.munkiimport/makepkginfo's --uninstallerdmg/--uninstallerpkg/--uninstallpkg option is now usable with more than Adobe installers -- you may now specify an uninstall package as the removal method for any item.A complete list of changes from version 6.1 is here: https://github.com/munki/munki/compare/v6.1.0...v6.2.0
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.2. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.2.0.4541.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.
This official release of Munki 6.1, which contains new features as well as bug fixes to the Munki tools. (This is the same build as beta 3)
AppleSoftwareUpdatesIncludeMajorOSUpdates to true to override this behavior.munkiimport: https://github.com/munki/munki/commit/1f0dec689e0e5167c8545ea2de959fb7241887c9 and https://github.com/munki/munki/commit/929a7e9991deab9b0aca319a93f531fdc3e7739a
startosinstall: https://github.com/munki/munki/commit/51cad91a3140456b5b4a1407cf725fdc219bf998 https://github.com/munki/munki/commit/4c4c46132c78ba8a18921023f21f68551cacc939
munkiimport/makepkginfo can now extract version info from a distribution-style package's Distribution file if present: https://github.com/munki/munki/commit/21a6a4d3a5c8dbe0aeda964e99d4824dad721be0 https://github.com/munki/munki/commit/b0cfd6a7899911c36fc6223d61cf1dc1f83cdf64
Complete list of changes from v6.0.1 here: https://github.com/munki/munki/compare/v6.0.1...v6.1.0
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.1. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.1.0.4536.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.
This is the second beta release of Munki 6.1, which contains new features as well as bug fixes to the Munki tools.
munkiimport and makepkginfo when detecting the product version in a distribution-style package. Thanks to @jamesez https://github.com/munki/munki/commit/b0cfd6a7899911c36fc6223d61cf1dc1f83cdf64
AppleSoftwareUpdatesIncludeMajorOSUpdates to true to override this behavior.munkiimport: https://github.com/munki/munki/commit/1f0dec689e0e5167c8545ea2de959fb7241887c9 and https://github.com/munki/munki/commit/929a7e9991deab9b0aca319a93f531fdc3e7739a
startosinstall: https://github.com/munki/munki/commit/51cad91a3140456b5b4a1407cf725fdc219bf998
munkiimport/makepkginfo can now extract version info from a distribution-style package's Distribution file if present: https://github.com/munki/munki/commit/21a6a4d3a5c8dbe0aeda964e99d4824dad721be0
Complete list of changes from v6.0.1 here: https://github.com/munki/munki/compare/v6.0.1...v6.1.0b2
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.1. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.1.0.4535.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.
This is the first beta release of Munki 6.1, which contains new features as well as bug fixes to the Munki tools.
AppleSoftwareUpdatesIncludeMajorOSUpdates to true to override this behavior.munkiimport: https://github.com/munki/munki/commit/1f0dec689e0e5167c8545ea2de959fb7241887c9 and https://github.com/munki/munki/commit/929a7e9991deab9b0aca319a93f531fdc3e7739a
startosinstall: https://github.com/munki/munki/commit/51cad91a3140456b5b4a1407cf725fdc219bf998
munkiimport/makepkginfo can now extract version info from a distribution-style package's Distribution file if present: https://github.com/munki/munki/commit/21a6a4d3a5c8dbe0aeda964e99d4824dad721be0
Complete list of changes from v6.0.1 here: https://github.com/munki/munki/compare/v6.0.1...v6.1.0b1
The GUI apps and the Python framework were built under Xcode 14.2 on macOS 13.1. Other versions of Xcode have not been tested and may cause different results.
munkitools-6.1.0.4533.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE. It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.