What do we actually care about? Charles Edge Jamf :: krypted.com :: MacAdmins Podcast

Transcription

1 What do we actually care about? Charles Edge Jamf :: krypted.com :: MacAdmins Podcast

2 A good reason to complain!

3 Who builds the tools of the future?

4 Those with the domain knowledge

5 What do we care about?

6 Whatever my boss says

7 Making our deployments better

8 The next job

9 I fight for the users

10 Driving the community forward

11 But what community?

12 Our identities

13 The Full Stack Mac Admin

14 What is a full stack developer?

15 Does it all

16 Desktop support

17 Server support

18 Writes middleware when needed

19 Maybe has to troubleshoot printer drivers

20 Release manager

21 Infosec

22 Common in startups

23 Unique in infrastructure

24 But dev teams grow

25 Historically most admins were Full Stack

26 Because there weren t enough of us

27 And it took so long to become an expert

28 And deployments weren t big enough

29 Full stack admins cared about

30 Servers

31 Podcast Producer

32 Open Directory

33 Those were always underpowered

34 Mobile Home Directories

35 But those always had sync errors

36 Making scripts to move portable homes

37 Controlling the dock

38 But students always messed with it

39 Binding to Active Directory

40 We always had errors

41 Managed Preferences

42 Clear that mcx cache

43 And many an admin still manages

44 Xsan

45 Kerio

46 Let s take a look

47 2008 Open Directory Podcast Producer Active Directory Avid AppleScript OS X Server Tools Leopard Deployment iphone OTA Security MCX Collaboration Services

48 2009 The Snow Leopard Mac OS X Mail Server Spam Assassin Kerio Mail Server Collaboration Services Directory Services Deploy Studio System Imaging Filewave launchd ZFS Virtualization Backup

49 2010 CrashPlan Pro Switching to Mac InstaDMG Active Directory Directory Services Monitoring Installer Packages FileWave Xsan Security Intro to shell scripting Troubleshooting Virtualization

50 2011 Jamf Lion Server Puppet DeployStudio Xsan MCX IPv6 Being a sysadmin Deploying ios Installer Packages Munki Troubleshooting clients Troubleshooting Mac Servers

51 2012 Wireless planning Mountain Lion Server Munki Jamf Reposado Directory Services ios Deployment Backups BYOD Certs Logs Moving to centralized management Regular Expressions FileWave Windows Servers AD Migrations Virtualization Puppet Writing apps

52 2013 What is the Internet The Future SCCM FileVault 2 AppleScript and Automation Autopkg Absolute Puppet and Linux 802.1x Stolen Macs Selling to management Jamf FileWave IPv6 Mobile Strategy Jamf with Munki Product Management Deployment workflows Centrify Technical writing ios 7

53 2014 Macs in the Enterprise Worst Practices Security Command line networking tools The Mac in education Macs in Windows environments NetBoot AppleScript and scripting SCCM launchd APIs Backup Jamf Switching to the Mac Autopkg ios Deployments Munki FileWave ios Managed Open In Enterprise Bookstore Swift Monitoring

54 2015 NeXT and the Mac Overview of tools Packaging Adobe Building the Mac client JAMF Munki Final Cut and Xsan Disaster Recovery Ansible Managing resources App development FileVault FileWave Profiles Apple Services SCCM MDM Centrify Packaging ios Deployment Docker

55 2016 ios Security Imagr The Mac at Cisco Packaging Adobe products Virtualization Design thinking Binding to directory services Crashplan Swift Playgrounds Jamf Swift FileWave Security Finding version information Consumerism SCCM Helpdesk Certificates Scripting The command line

56 2017 Security Bash scripting Tips and Tricks Security vs productivity Security More Security Code signing for security BSM for even more security Nomad vs Active Directory Keychains DEP FileWave JAMF Munki SCCM APFS NoLo The Community How computers work

57 And macos Server

58 Trends

59 Trends Backup Directory services Scripting Packaging More and more security Imaging Less Server More device management More third parties Always a state of the union!

60 The trends are consistent

61 But what do we care about now?

62 Having arguments about whether imaging is dead

63 Not macos Server

64 Management platforms

65 Scripting all the things

66 Captain obvious says: MDM

67 Not macos Server

68 Caching

69 Packaging

70 Not macos Server

71 Providing an amazing user experience

72 Getting away from Active Directory

73 Whatever infosec wants

74 Keeping our systems secure

75 Is this managing the state of systems?

76 ITSM

77 Automating the request for software

78 Viewing device details while creating a service ticket

79 Locking a device from a service desk portal

80 Deployments are growing

81 The end of the full stack admin?

82 Where will we gravitate to next?

83 Platform Engineers

84 QA

85 Release Managers

86 Managing teams?

87 Infosec

88 Ensuring the security of our deployments

89 Server management

90 Middleware

91 Viewing device details while creating a service ticket

92 Connect our patch management systems to

93 Service Desk systems

94 Log aggregation and analysis

95 Other patch management systems

96 HR systems

97 Identity management

98 Line of business apps

99 Self-healing systems

100 And way, way more

101 What does all of this mean?

102 Increased specializations mean

103 Crossing platforms?

104 A fork in the road

105 Is the Mac a mobile device?

106 Is the Mac a desktop OS?

107 If it s a mobile device

108 The impact to scripting

109 Like with SKEL

110 Reverse engineering

111 Disable SIP to use dtrace

112 Jailbreaking

113 Will all services need to be signed soon?

114 Writing apps

115 And back to managing the state of devices.

116 How does SIP impact state?

117 What is the state of an ios device?

118 Even the smallest security incident

119 Less and less access

120 More deployments mean the platform needs to be easier

121 10 years ago

122 ios and the Mac are coming together

123 So what should we care about?

124 Disabling SIP?

125 Nah

126 Disabling SKEL?

127 Nah

128 If you don t script it, how do you

129 Freeze software updates

130 Deploy settings?

131 Deploy App Store apps?

132 Deploy non-app Store apps?

133 Deploy settings to apps?

134 Deliver a system in a known state?

135 The concept of a filesystem

136 How do apps share data?

137 We now have multiple users for ipads (kinda )

138 But

139 OS 9

140 Who builds the tools of the future?

141 The full stack admins of the past

142 And

143 Master ios management

144 Q&A