kandji-inc / support Goto Github PK

This is more of an FYI. If https://github.com/kandji-inc/support/blob/e631d21a71cdcba65e69aff77388743301f9548a/Scripts/InstallHomebrew.zsh is run before a user is created, /opt/homebrew will be owned by root, and unusable by other users. It would be ideal (IMO) if the script errored instead of installing for root, which is probably never(?) desirable.

The fix on my end is to ensure the script only runs after the user has been created.

I'm using the InstallHomebrew.zsh and notice that it does not provide xcode license acceptance. Do you have a snippet somewhere that does that?

In particular, I've got an installer that checks for homebrew being present, but failed with this error:

Error: You have not agreed to the Xcode license. Please resolve this by running: sudo xcodebuild -license accept

Is this a per user license acceptance or can I run this as the kandji root-level user and accept the license for all users on the device?

Thanks!

--Mike

The mobileconfig file for Clouflare WARP available at https://github.com/kandji-inc/support/blob/main/Configuration%20Profiles/cloudflare_warp.mobileconfig has a missing </array> on line 33-34. This leads to a failure in creating a warp custom profile on Kandji.

When running the command below, the .csv is pulling all fields. I tried os version and ade eligible and that seemed to work okay.
device_details.py --os-version 13.4 --filevault on

https://github.com/kandji-inc/support/tree/main/api-tools/device-details

Is it possible to add/modify the max number of deferrals on the macOS Update Script? I have some users that would like to defer for far too long.

Thanks a lot

I tried the InstallHomebrew.sh from this repo as describe in the Deploying Homebrew as a Custom Script support article. It fails if Apple's Command Line Tools for Xcode are not installed.

I understand this is a Homebrew requirement, but was expecting that the script would handle that scenario. Meaning the script would be more resilient and could be made available as a Self Service item.

Our organization is running InstallHombrew.zsh on a schedule to keep cli tools, homebrew, etc up to date. The issue is that the trick to get the CLI tools in to see the latest version in softwareupdate (touching /tmp/.com.apple.dt.CommandLineTools.installondemand.in-progress and running softwareupdate --list) will show an update notification on the gui software update. The solution to this is to run softwareupdate --list sometime after removing the temporary file or at the end of the script with the various cleanup steps. This will cause software update to not show uneeded cli-tool updates.

Can this be implemented?

When used as a preinstall script, the script installRosetta2.sh fails with license agreement prompt:

Executing preinstall script...

Script exited with non-zero status.

Script results:

I have read and agree to the terms of the software license agreement. A list of Apple SLAs may be found here: https://www.apple.com/legal/sla/

Type A and press return to agree: 
An error occurred executing the item "GnuGPG 2.4.5": error running preinstall script

OS Version:14.4
System Version:macOS 14.4 (23E214)
Agent Installed:Yes
Agent Version:4.5.2 (5061)

The Homebrew installation script is not updating the user's path.

The command output by brew doctor is:

echo 'export PATH="/opt/homebrew/bin:$PATH"' >> ~/.zshrc

~/.zshrc doesn't exist.

I'm new to MDM. Perhaps the script should touch the file first?