Munki Versions Save

This is a beta release of Munki 5.7, a feature-add and bug-fix release of the Munki tools.

Known issues

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.
• Managed Software Center has a visual issue under Catalina and earlier: a thin separator line appears between the "title bar" and "content" areas of the window. (This is not an issue new to this release).

Changes and fixes:

• Included Python version has been bumped to 3.10.4
• PyObjC version has been bumped to 8.2
• A new option (-A) to make_munki_mpkg.sh trigger a managedsoftwareupdate --auto run immediately after install. This is intended for use with a DEP/ADE-style enrollment where the user creates their account in the Setup Assistant. Once the Setup Assistant exits, the user is automatically logged into their newly-created account, skipping any chance for Munki to bootstrap at the loginwindow. Using this option will cause Munki to do an automatic run in the background immediately. Use with care.
• Removed the -m option to make_munki_mpkg.sh: the package generated should work in both DEP/ADM install scenarios and other installation scenarios.
• A fix for an issue where clicking on a Notification Center notification would not reliably launch Managed Software Center.app in some configurations. This change may require some additional admin effort -- see "Notification Center changes" below for details
• A fix for an issue where an "aggressive/obnoxious" notification triggered when there was another application in full screen mode might result in all interaction being blocked. See https://github.com/munki/munki/issues/1108 for more details on the issue.

Notification Center changes

• Notification Center notifications are posted by the munki-notifiy.app, which is a helper app included inside the Managed Software Center application. Prior to Munki 5.7, it used a "clever" but unsupported technique to "spoof" the bundle identifier of Managed Software Center.app (com.googlecode.munki.ManagedSoftwareCenter). This technique caused Notification Center to display MSC.app's icon in the notifications, and to attempt to launch MSC.app (instead of munki-notifier) when a notification was clicked on.
• For reasons not entirely understood yet, this spoofing technique failed in some configurations, with usernotifyd complaining that it could not "...find appropriate application to launch for com.googlecode.munki.ManagedSoftwareCenter..." and therefore failing to launch MSC.app.
• This issue seemed to affect Apple silicon Macs 100% of the time. It suspect it has to do with the fact that all code must be signed on Apple silicon (by default Munki's code is "ad-hoc" signed on Apple silicon), and that the signature of the real MSC.app does not match the signature of munki-notifier. This might explain the failure for some people even on Intel -- perhaps they were signing the GUI apps.
• The problem can be avoided by abandoning the bundle identifier "spoofing" technique and letting clicking on a notification just (re-)launch munki-notifier, which in turn can launch MSC.app. We can make munki-notifier look like MSC.app by giving it the same icon as MSC.app and using localized display names to cause it to display the same name as MSC.app. From a user's point-of-view, it still looks like the notifications are coming from MSC.app. But from Notification Center's perspective, the notifications are coming from munki-notifier, which has a bundle identifier of com.googlecode.munki.munki-notifier.
• Machines that ran releases of Munki prior to 5.7 will now likely have two entries for "Managed Software Center" in the Notification Center preferences pane. One would be the "old" one for the com.googlecode.munki.ManagedSoftwareCenter bundle identifier; the other will be the new one for munki-notifier's actual com.googlecode.munki.munki-notifier bundle identifier.
• Administrator task: If you are currently installing a configuration profile to ensure Managed Software Center notifications are being allowed/delivered, you'll need to update that profile (or add a new one) to allow notifications from munki-notifier (bundle identifier com.googlecode.munki.munki-notifier). If you do not install a profile, your users (running Catalina and above) will get a new notification asking if they want to allow "Managed Software Center" to send them notifications. Assume that many will say no.
• Administrator task: If you "re-brand" Managed Software Center, you'll need to make changes to the munki-notifier app as well, since it now shares an icon and localized display names with Managed Software Center. Tools like munki-rebrand (https://github.com/ox-it/munki-rebrand) will need to be updated.

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.6.4...v5.7.0b1

Build info

The apps and the Python framework were built under Xcode 13.2.1. There have been issues reported with building the Python framework with Xcode 13.3 and 13.3.1.

Package versioning

• metapackage version: 5.7.0.4415
• munki core tools version: 5.7.0.4408
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.6.0.4411
• Python package version: 3.10.4.4415

Attachment info

munkitools-5.7.0.4415.pkg is a package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier).

This is the official release of Munki 5.6.4, a bug-fix release of the Munki tools.

Known issues:

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

• Fix for items displaying in Managed Software Center's Updates view under both Pending Updates and Available Updates. See https://github.com/munki/munki/issues/1116 Commit: https://github.com/munki/munki/commit/d734c2ce9efbb65078b36f8244a81469f92ec906
• Fix for bytes vs string issue in removepackages: https://github.com/munki/munki/commit/7708340a3af3ce83693c56cbcd1129e4e5795ffe
• Attempt to use softwareupdate item "Deferred" info if available to not display deferred items: https://github.com/munki/munki/commit/1a7ab81e1493cb67b3ab15399e75a36cbeba1f9d

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.6.3...v5.6.4

See the release notes for the 5.6.0, 5.6.1, 5.6.2, and 5.6.3 releases for changes since Munki 5.5.x.

Package versioning

• metapackage version: 5.6.4.4406
• munki core tools version: 5.6.4.4406
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.2.4402
• Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.4.4406.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.4.4406.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.6.3, a bug-fix release of the Munki tools.

Known issues:

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

• Change the "shebang" lines of makecatalogs and repoclean to #!/usr/local/munki/munki-python. This will make these tools easier to use on macOS after Apple removes their Python 2 install from the OS.
  • Hint: https://developer.apple.com/documentation/macos-release-notes/macos-12_3-release-notes
  • You should still be able to run these tools with an alternate Python and on Linux or Windows. You'll need to either edit the "shebang" line manually, or call the tools via the Python of your choice.
• Remove code/server, which contained only a sample proof-of-concept Python 2 CGI that is arguably of little use now.

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.6.2...v5.6.3

See the release notes for the 5.6.0, 5.6.1 and 5.6.2 releases for changes since Munki 5.5.x.

Package versioning

• metapackage version: 5.6.3.4401
• munki core tools version: 5.6.3.4401
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.1.4395
• Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.3.4401.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.3.4401.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.6.2, a bug-fix release of the Munki tools.

Known issues:

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

• Managed Software Center: if there are "overdue" installs and we've entered "obnoxious mode", don't display other available installs, as adding them provides a trivial way to escape "obnoxious mode": https://github.com/munki/munki/commit/e590d6f2f5182381dca82f8fd6acd39f104a12d4
• macOS installs: do not attempt to install on Apple silicon. When generating a pkginfo for an OS installer, mark with 'supported_architectures': ["x86_64"] since Munki cannot yet upgrade macOS on Apple silicon. https://github.com/munki/munki/commit/38d8ccaf9077c964bedd7fbaec7cb1d4ab846315

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.6.1...v5.6.2

See the release notes for the 5.6.0 and 5.6.1 releases for changes since Munki 5.5.x.

Package versioning

• metapackage version: 5.6.2.4398
• munki core tools version: 5.6.2.4398
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.1.4395
• Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.2.4398.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.2.4398.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.6.1, a bug-fix release of the Munki tools.

Known issues:

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

Changes and fixes:

• Change PyObjC version to 7.2 to resolve an issue with client certificates on macOS 10.14.x. Thanks to @rrenstrom and @np5. https://github.com/munki/munki/commit/f6a49175c7ad5617bbce85a0ce9232ab4354c6c0 #1115
• In Managed Software Center, disable "Reload Page" menu item when in "obnoxious mode", which provided an easy way to escape "obnoxious mode". https://github.com/munki/munki/commit/5c9513ca561610c040ff66fd88b95fae3b4e3d75

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.6.0...v5.6.1

See the release notes for the 5.6.0 release for changes since Munki 5.5.x.

Package versioning

• metapackage version: 5.6.1.4394
• munki core tools version: 5.6.1.4393
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.1.4394
• Python package version: 3.9.7.4392

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.1.4394.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.1.4394.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.6, a feature-add and bug-fix release of the Munki tools.

This release is identical to 5.6 Release Candidate 2.

Munki 5.6 is recommended for use with macOS Monterey, and is supported on macOS 10.11 - macOS 12.

Known issues:

• Munki cannot yet upgrade Apple silicon Macs to macOS Monterey.

General changes and fixes:

• Bump Python version to 3.9.7; bump PyObjC to 7.3 https://github.com/munki/munki/commit/87365bef621404d5f05ccdc9fdd6639fef13ab8b
• Add software update catalog for macOS 12: https://github.com/munki/munki/commit/d90f9e2fc607f0f8251ae50773c3eb90fbb49990
• Tighten the security of the client keychain. Thanks to Rob Renstrom. https://github.com/munki/munki/commit/7d200b9fb171aa1d59e237d1938f1b34b54d589d
• More reliable "escalated" notifications of long-pending installs: https://github.com/munki/munki/commit/65bb1d19fb74657805bfb79f8c4ddfc502d5fd10
• A fix for one possible crash of app_usage_monitor: https://github.com/munki/munki/commit/d6e40549e374b3cdb0a5e78b740a83c3c69f46e8

Managed Software Center changes and fixes:

• Hide left sidebar in Managed Software Center if there are no optional installs. Thanks to Chris Grande. https://github.com/munki/munki/commit/503be237196a9b74f9a70a896d32b65a01a71922
• Fix for a crash when in fullscreen mode: https://github.com/munki/munki/commit/13e4d428bba0989eb7d080f3e56244b6e100ca42
• Better behavior when "Light/Dark" interface mode is set to Automatic: https://github.com/munki/munki/commit/e1ad73920d87fa314540faa34b4369ea4f23b6ac
• Don't prompt for FV password if we're being asked to quit as part of installing an Apple update: https://github.com/munki/munki/commit/7ce36e1c3bef082b92a0b0642f205bdecccd9e16
• Increase time after MSC opens the Software Update preferences pane until it exits: https://github.com/munki/munki/commit/cfd7d45175faa813a131cce7201e6870b2ac6f02

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.5.1...v5.6.0

Package versioning

• metapackage version: 5.6.0.4385
• munki core tools version: 5.6.0.4385
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.0.4382
• Python package version: 3.9.7.4378

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.0.4385.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.0.4385.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is a release candidate of Munki 5.6, a feature-add and bug-fix release of the Munki tools. Though it is believed stable, please do not deploy widely before testing.

General changes and fixes:

• Bump Python version to 3.9.7; bump PyObjC to 7.3 https://github.com/munki/munki/commit/87365bef621404d5f05ccdc9fdd6639fef13ab8b
• Add software update catalog for macOS 12: https://github.com/munki/munki/commit/d90f9e2fc607f0f8251ae50773c3eb90fbb49990
• Tighten the security of the client keychain. Thanks to Rob Renstrom. https://github.com/munki/munki/commit/7d200b9fb171aa1d59e237d1938f1b34b54d589d

Managed Software Center changes and fixes:

• Hide left sidebar in Managed Software Center if there are no optional installs. Thanks to Chris Grande. https://github.com/munki/munki/commit/503be237196a9b74f9a70a896d32b65a01a71922
• Fix for a crash when in fullscreen mode: https://github.com/munki/munki/commit/13e4d428bba0989eb7d080f3e56244b6e100ca42
• Better behavior when "Light/Dark" interface mode is set to Automatic: https://github.com/munki/munki/commit/e1ad73920d87fa314540faa34b4369ea4f23b6ac
• Don't prompt for FV password if we're being asked to quit as part of installing an Apple update: https://github.com/munki/munki/commit/7ce36e1c3bef082b92a0b0642f205bdecccd9e16

Other changes

A complete list of changes is here: https://github.com/munki/munki/compare/v5.5.1...v5.6.0RC1

Package versioning

• metapackage version: 5.6.0.4380
• munki core tools version: 5.6.0.4380
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 5.5.0.4374
• Python package version: 3.9.7.4378

Attachment info

There are two packages attached to this release:

• "munkitools-5.6.0.4380.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs. If you don't know which package to use, use this one.
• "munkitools_DEP-5.6.0.4380.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.5.1, a bug-fix release of the Munki tools.

This release changes the default Apple Software Update CatalogURL used by Munki when processing Apple updates under Big Sur. This change addresses an issue where certain recent updates were not showing as pending for installation. (Safari 15 and Command Line Tools for Xcode 13 were affected.)

There are two packages attached to this release:

• "munkitools-5.5.1.4365.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs.
• "munkitools_DEP-5.5.1.4365.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This is the official release of Munki 5.5, a feature-enhancement and bug-fix release of the Munki tools.

Some of the changes:

• A new method of finding client certs for mTLS: https://github.com/munki/munki/pull/1077 (Thanks to @np5)

  • This also addresses some issues around client certs some admins reported when upgrading to macOS 11.3 or later.
  • This required the addition of asn1crypto to the Python framework

• Related: a new option for the Munki package build script to include a client cert package: https://github.com/munki/munki/pull/1091 (Thanks to @rrenstrom)

• UI change: when there are no optional installs defined, all labels other than Updates are hidden: https://github.com/munki/munki/pull/1089 (Thanks to @macmule)

• When the InstallAppleSoftwareUpdates preference is True on Apple silicon:

  • Munki will not actually attempt to install any Apple updates on Apple silicon
  • Managed Software Center will now display pending Apple updates and direct users to install them using the Software Update pane in System Preferences
  • "Encouragement" as described here will happen on Apple silicon for Apple updates as well as "Munki" updates: https://github.com/munki/munki/wiki/aggressive-update-notifications-in-munki-5

• Bumped the Python version to 3.9.5 (from 3.9.4)

Other minor changes. See https://github.com/munki/munki/compare/v5.4.0...v5.5.0 for a complete list.

This is the same build as the 5.5.0 Beta 2 release -- there have been no changes since that release.

There are two packages attached to this release:

• "munkitools-5.5.0.4362.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs.
• "munkitools_DEP-5.5.0.4362.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using make_munki_mpkg.sh -m -B). You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.

This the official release of Munki 5.4: a bug-fix and feature-enhancement release of the Munki tools. It is a Universal2 build that runs natively on Apple silicon.

It contains a Universal2 build of Python 3.9.4 from here: https://www.python.org/downloads/mac-osx/

It also contains PyObjC 7.1 and xattr 0.9.7.

Changes since 5.3:

• Python framework updated to Python 3.9.4. https://github.com/munki/munki/commit/7d53d176b0fe242db46304888330cb06c4cfbea7
• PyObjC updated from 7.0.1 to 7.1. https://github.com/munki/munki/commit/43eb5405dff9ed16a05c218e7f09bce02b93ee6c
• A workaround for a softwareupdate bug in Big Sur that causes "aggressive notifications" for Apple updates to fail. https://github.com/munki/munki/commit/851cfc30418d8c2d138b378966371abbf3a1b467
• New --arch option for munkiimport and makepkginfo to enable specifying supported_architectures when importing an item https://github.com/munki/munki/commit/870660c3acf2adcd972e1ddead0fe70295ce0f3b

Other minor changes. See https://github.com/munki/munki/compare/v5.3.0...v5.4.0 for a complete list.