InstallLion.pkg. Automating your Lion Installation. Allen Golbig Memorial Sloan-Kettering Cancer Center

Transcription

1 InstallLion.pkg Automating your Lion Installation Allen Golbig Memorial Sloan-Kettering Cancer Center

2 OS X Lion Released July 20, 2011 Mac App Store Easy to install Deployment Concerns Mac App Store made it very easy for our users to both download and install OS X Lion. We needed to make sure users didn t install their personal licenses on our Assets.

3 Restricted Software With JAMF s Casper Suite you can block the Lion installer with the Restricted Software Settings. When a user launches the Install Mac OS X Lion.app, the process will be killed and a message will be displayed to the user.

4 Self Service With Self Service we can easily deploy Lion to our users.

5 InstallLion.pkg Created by Greg Neagle InstallLionPkg_ zip Fully automated Lion Installer Ability to customize InstallESD.dmg Deployable with almost any management tool Advantages of InstallLion vs MAS Installer: Fully automated and the Ability to customize the InstallESD.dmg.

6 What is InstallLion.pkg? Payload-Free Package Script only installer package Postflight script does all the work InstallLion.pkg/Contents/Resources/ postflight Mimics the OS X Lion GUI Installer A payload-free package is a package that contains no files to install, so the Installer application uses scripts to automate any process.

7 Getting Started Get your VPP Download Install Mac OS X Lion.app from the Mac App Store sudo cp /Applications/Install\ Mac\ OS\ X\ Lion.app/ Contents/SharedSupport/InstallESD.dmg InstallLion.pkg/Contents/Resources Once you ve copied the InstallESD.dmg to the Resources folder you are all set. If you re not looking for any customizations, then you have your Automated Lion installer.

8 A Closer Look

9 Pacifist InstallESD.dmg has been copied to InstallLion.pkg/Contents/Resources

10 Distribution.dist Basic Installation Checks and Volume Checks Prevents installation - Defaults 64-bit Intel Processor Less than 2GB of Ram Less than 8GB HD Space Less than and Distribution.dist does basic prerequisite checks. Not as thorough as the MAS Installer, but it will get the job done.

11 Modifying Distribution.dist function install_check() { if(system.sysctl( hw.memsize ) < 2 * 1024 * 1024 * 1024) { my.result.title = Not enough RAM ; my.result.message = 2GB of RAM required to install. ; my.result.type = Fatal ; return fales; function install_check() { if(system.sysctl( hw.memsize ) < 4 * 1024 * 1024 * 1024) { my.result.title = Not enough RAM ; my.result.message = 4GB of RAM required to install. ; my.result.type = Fatal ; return fales; You can alter the distribution.dist. For example, if you wanted to set the minimum amount of RAM required, just adjust the hw.memsize to 4 * 1024 * 1024 * 1024

12 Postflight Script

13 Mac OS X Install Data Mac OS X Install Data is created at the root of the drive

14 boot.efi & kernelcache Mounts InstallESD.dmg to /tmp and copies boot.efi & kernelcache to Install Data folder

15 InstallESD.dmg Unmounts InstallESD.dmg Based on Target of Installation, either hard links or copies InstallESD.dmg to Install Data Folder

16 com.apple.boot.plist Creates com.apple.boot.plist Tells the kernel how to mount and use InstallESD.dmg on reboot

17 com.apple.boot.plist # Example com.apple.boot.plist: # # <?xml version="1.0" encoding="utf-8"?> # <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" # " # <plist version="1.0"> # <dict> # <key>kernel Cache</key> # <string>/mac OS X Install Data/kernelcache</string> # <key>kernel Flags</key> # <string> # container-dmg=file:///mac%20os%20x%20install%20data/installesd.dmg # root-dmg=file:///basesystem.dmg</string> # </dict> # </plist> Tells the kernel which was copied to the Install Data folder how to mount and use InstallESD.dmg on restart.

18 minstallconfig.xml This is the file that tells the installer among other things that it will be an automated install. Also informs the installer if a MacOSXInstaller.choiceChanges file is present, if you ve customized your installer and what the Target of the install is.

19 Note: Custom vs Default Packages /System/Installation/Packages/OSInstall.collection vs /System/Installation/Packages/ OSInstall.mpkg minstallconfig.xml <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" " <plist version="1.0"> <dict> <key>choicechanges</key> <string>macosxinstaller.choicechanges</string> <key>installtype</key> <string>automated</string> <key>language</key> <string>en</string> <key>package</key> <string>/system/installation/packages/osinstall.collection</string> <key>target</key> <string>/</string> <key>targetname</key> <string>macintosh HD</string> <key>targetuuid</key> <string>0a81f3b1-51d b3e3-169c d</string> </dict> </plist> ChoiceChanges file present InstallType - Automated Custom Packages added - /System/Installation/Packages/OSInstall.collection Target is /

20 index.sproduct & OSInstallAttr.plist If index.sproduct exists, it will copy the Packages that are referenced in it, (MacOS_10_7_IncompatibleAppList.pkg) otherwise it will create an empty index.sproduct. OSInstallAttr.plist logs the time at which the installation finished. It also provides the path to the automation file (minstallconfig.xml). If too much time passes the automation step is skipped.

21 index.sproduct <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " <plist version="1.0"> <dict> <key>packages</key> <array> <dict> <key>identifier</key> <string>com.apple.pkg.compatibilityupdate</string> <key>size</key> <integer>10998</integer> <key>url</key> <string>macos_10_7_incompatibleapplist.pkg</string> <key>version</key> <string>10.7</string> </dict> </array> </dict> </plist> Example of index.sproduct that references MacOS_10_7_IncompatibleAppList.pkg, which means both will be installed by the postflight script.

22 OSInstallAttr.plist <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" " <plist version="1.0"> <dict> <key>iaenddate</key> <date> t17:54:30z</date> <key>ialogfile</key> <string>/volumes/macintosh HD/Mac OS X Install Data/ia.log</string> <key>osiautomationfile</key> <string>/volumes/macintosh HD/Mac OS X Install Data/minstallconfig.xml</string> </dict> </plist> OSInstallAttr.plist logs the time at which the installation finished. Provides path to Automation File, /Volumes/Macintosh HD/Mac OS X Install Data/ minstallconfig.xml. If too much time passes the automation step is skipped.

23 Set Nvram install_product_url = 'install-product-url=x-osproduct://' install_product_url += installvolinfo['volumeuuid'] install_product_url += '/Mac%2520OS%2520X%2520Install%2520Data' print 'Setting OS X installer NVRAM install-product-url variable...' try: subprocess.check_call(['/usr/sbin/nvram', install_product_url]) except subprocess.calledprocesserror, e: cleanupfromfailandexit('couldn\'t set nvram: %s' % e) Sets a variable in nvram that the OS X Installer uses to find the product install info after reboot.

24 Bless folder = install_data_path bootefi = os.path.join(install_data_path, 'boot.efi') options = 'config="\mac OS X Install Data\com.apple.Boot"' label = 'Mac OS X Installer' cmd = ['/usr/sbin/bless', '--setboot', '--folder', folder, '--bootefi', bootefi, '--options', options, '--label', label] print 'Blessing OS X installer boot environment in %s...' % folder try: subprocess.check_call(cmd) except subprocess.calledprocesserror, e: cleanupfromfailandexit('failed to bless Lion install startup: %s' % e) Uses the `bless` command to cause the Mac to boot from the kernel files copied to the "Mac OS X Install Data" directory.

25 Restart!

26 Customization

27 Reasons to Modify Alter the default installer options Put back your Management tools Re-create your Admin Account Install additional Applications

28 What Can You Customize? MacOSXInstaller.choiceChanges getincompatibleapplistpkg customizeinstallesd

29 MacOSXInstaller.choice Changes Alter the default installation InstallLion.pkg/Contents/Resources/Mac OS X Install Data/ Create a choices.xml file installer -verbose -pkg /Volumes/Mac\ OS\ X\ Install\ ESD/Packages/OSInstall.mpkg -tgt / Volumes/Installer -showchoicechangesxml > / tmp/choices.xml Grab an external drive and run the command to create the choices.xml.

30 Removing X11 from Installation <dict> <key>attributesetting</key> <integer>1</integer> <key>choiceattribute</key> <string>selected</key> <key>choiceidentifier</key> <string>x11</string> </dict> <dict> <key>attributesetting</key> <integer>0</integer> <key>choiceattribute</key> <string>selected</key> <key>choiceidentifier</key> <string>x11</string> </dict> Here is an example of what you would need to change in the choices.xml file. This will remove X11 from the default installation. Save your choices.xml as MacOSXInstaller.choiceChanges and copy it to InstallLion.pkg/Contents/Resources/Mac\ OS\ X\ Install\ Data/

31 getincompatibleapplistpkg Downloads MacOS_10_7_IncompatibleAppList.pkg and index.sproduct Updates a list of software that is incompatible with Lion If not included the postflight script will create an empty index.sproduct During the actual Lion installation, Mac OS X moves known-incompatible software to a folder named "Incompatible Software" at the root level of the hard drive.

32 MacOS_10_7_IncompatibleAppList.pkg /System/Library/PrivateFrameworks/SystemMigration.framework/Versions/A/Resources/ English.lproj/IncompatibleApplicationsStrings.strings /System/Library/PrivateFrameworks/SystemMigration.framework/Versions/A/Resources/ MigrationIncompatibleApplicationsList.plist

33 MigrationIncompatibleApplicationList.plist Example

34 Demo

35 customizeinstallesd Add additional packages to your installer Modifies InstallESD.dmg OSInstall.collection - tells OS X installer which packages must be installed Not all packages can be added Due to lack of tools included in the OS X Lion installer environment, some packages will not install properly. Some examples of this are CreateLionUser.pkg and QuickAdd.pkg. You can check what is available by booting into the Recovery HD environment.

36 Command Options./customizeInstallESD -h Usage: customizeinstallesd [--app /path/to/install Mac OS X Lion.app --dmg /path/to/installesd.dmg] [--output /path/to/custom/installesd.dmg] pkg_path [...] customizeinstallesd creates a customized Lion installation disk image containing the contents of the original InstallESD.dmg plus the additional packages provided as arguments. Packages will be installed in the order you provide them at the command-line. Options: -h, --help show this help message and exit -a APP, --app=app path to Install Mac OS X Lion.app. -d DMG, --dmg=dmg path to (original) InstallESD.dmg. Specify this option if you have a copy of the InstallESD.dmg file but not a copy of "Install Mac OS X Lion.app". -o OUTPUT, --output=output Optional. Path for output DMG. Defaults to "InstallESD.dmg" in the current working directory. By default customizeinstallesd will use the InstallESD.dmg within the Install Mac OS X Lion.app If it s not in Applications, use -a to point to the correct location, or -d to point to your copy of the InstallESD.dmg

37 What to Add? sudo./customizeinstallesd Additional\ Packages/CreateAdmin.pkg Additional\ Packages/ DisableSetupAssistant.pkg Additional\ Packages/Firstboot.mpkg Additional\ Packages/ QuickTimePlayer7.6.6_SnowLeopard.pkg Additional\ Packages/XQuartz.pkg -o /Users/ Shared/ CreateAdmin.pkg DisableSetupAssistant.pkg Firstboot.mpkg XQuartz QuickTime CreateAdmin.pkg is a flatpackage that contains: /var/db/dslocal/nodes/defaults/users/hiddenadmin.plist & /private/var/hiddenadmin. This is the best way to create a hidden admin account w/ InstallLion.pkg

38 OSInstall.collection <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" " PropertyList-1.0.dtd"> <plist version="1.0"> <array> <string>/system/installation/packages/osinstall.mpkg</string> <string>/system/installation/packages/osinstall.mpkg</string> <string>/system/installation/packages/createadmin.pkg</string> <string>/system/installation/packages/firstboot.mpkg</string> <string>/system/installation/packages/disablesetupassistant.pkg</string> <string>/system/installation/packages/xquartz.pkg</string> <string>/system/installation/packages/quicktimeplayer7.6.6_snowleopard.pkg</string> </array> </plist>

39 Demo Once you ve created a new InstallESD.dmg just copy it to InstallLion.pkg/Contents/Resources.

40 A Final Look InstallESD.dmg copied to InstallLion.pkg/Contents/Resources/ index.sproduct, MacOS_10_7_IncompatibleAppList.pkg and MacOSXInstaller.choiceChanges in /InstallLion.pkg/Contents/Resources/Mac\ OS\ X\ Install\ Data/

41 Deploying Lion Casper Munki DeployStudio Absolute Mange Apple Remote Desktop

42 Casper We cache the Lion installer on machines based on a Smart Group. Once cached, the User will receive a notification that Lion is available in Self Service.

43 Casper

44 Munki

45 Munki

46 DeployStudio

47 DeployStudio

48 Absolute Manage

49 Absolute Manage

50 Apple Remote Desktop

51 Apple Remote Desktop

52 No matter what your deployment tool is, your users will see this on reboot.

53 Demo

54 Lessons Learned Automation will not happen if too much time takes place between the end of the install and restart Check your Packages and Scripts Remember that hidden Admin accounts will have to be re-installed.

55 Q&A