Basic Brilliant Scripting for Beginners. Bryce Carlson

Transcription

1 Basic Brilliant Scripting for Beginners Bryce Carlson

2 Basic Bash for Beginners Basic Brilliant Scripting for Beginners Bryce Carlson

3 bash script for macos

4 Bryce Carlson Senior Support Engineer at Jamf Previously at (pre 1/2016): UW - Green Bay Appleton Area School District

5

6 Agenda Why use a script? Basic anatomy of a script Logic Results (for Inventory) End User interaction in scripts Good commands to have Questions

7

8 Why use a script?

9 Command - Set Time Zone sudo systemsetup -settimezone America/Chicago

10 Command - Set Time Zone and sudo systemsetup -settimezone America/Chicago sudo systemsetup -setnetworktimeserver time.apple.com sudo ntpdate -u time.apple.com

11 Command - Set Time Zone and Last login: Mon Jun 18 15:27:23 on ttys000 carlson-jamf-mbp:~ bryce$ sudo systemsetup -settimezone America/ Chicago Set TimeZone: America/Chicago carlson-jamf-mbp:~ bryce$ sudo systemsetup -setnetworktimeserver time.apple.com setnetworktimeserver: time.apple.com carlson-jamf-mbp:~ bryce$ sudo ntpdate -u time.apple.com 19 Jun 15:28:36 ntpdate[6607]: adjust time server offset sec carlson-jamf-mbp:~ bryce$

12 !? ~/Desktop/some-script.txt

13 Text/Script Editors sudo nano

14 Text/Script Editors

15 !/bin/sh This script will set system timezone, NTP Server, and sync the clock, and remove skew set to US Central Time systemsetup -settimezone America/Chicago set ntp server to time.apple.com systemsetup -setnetworktimeserver time.apple.com runs an ntp update ntpdate -u time.apple.com

16 Basic anatomy of a script

17 The Script!/bin/sh This script will set system timezone, NTP Server, and sync the clock, and remove skew set to US Central Time systemsetup -settimezone America/Chicago set ntp server to time.apple.com systemsetup -setnetworktimeserver time.apple.com runs an ntp update ntpdate -u time.apple.com

18 !/bin/sh Interpreter line The Script = Comment This script will set system timezone, NTP Server, and sync the clock, and remove skew set to US Central Time systemsetup -settimezone America/Chicago set ntp server to time.apple.com systemsetup -setnetworktimeserver time.apple.com runs an ntp update ntpdate -u time.apple.com Command to run

19 The Script ~/Desktop/scripts/set-ntp.sh sudo sh ~/Desktop/scripts/set-ntp.sh!/bin/sh This script will set system timezone, NTP Server, and sync the clock, and remove skew set to US Central Time systemsetup -settimezone America/Chicago set ntp server to time.apple.com systemsetup -setnetworktimeserver time.apple.com runs an ntp update ntpdate -u time.apple.com

20 Logic

21 Logic IF, THEN, DO, ELSE, DO, FI WHILE, DO, DONE

22 Logic IF, THEN, DO, ELSE, DO, FI If we have this file, then do this command. If not move on. WHILE, DO, DONE While this file is here do this. When it is gone, or if it was never there move on.

23 IF THEN Example THEN DO IF FI.app ELSE DO

24 !/bin/sh if [ -f "/Applications/Minecraft.app" ]; then rm /Applications/Minecraft.app else say Thanks for not playing games fi

25 !/bin/sh if [ -f "/Applications/Minecraft.app" ]; then rm /Applications/Minecraft.app else say Thanks for not playing games fi Operator

26 !/bin/sh if [ -f "/Applications/Minecraft.app" ]; then rm /Applications/Minecraft.app else osascript -e 'display notification "Thanks for not playing games." with title Thanks!"' fi

27 Logic - Operators Operator What it does -f Looks for file -d Looks for folder File X -nt File Y If file X is newer than file Y (according to modification date) File X -ot File Y If file X is older than file Y x = y Value equals value x!= y Value does not equal value x -gt y X is greater than Y x -lt y X is less than Y

28 Logic - Operators carlson-jamf-mbp:~ bryce$ help test

29 WHILE DO Example WHILE DO DONE.app

30 !/bin/sh while [ -f /Applications/Minecraft.app ]; do echo The game is here; removing rm /Applications/Minecraft.app done echo All good here we will move on now"

31 WHILE DO Example DO WHILE sleep 60 DONE.appdownload

32 !/bin/sh while [ -f /Applications/*.appdownload ]; do echo "Apps Installing" sleep 60 done echo "Apps Done Installing"

33 Results (for Inventory)

34 Scenarios You want to know the date and time of the last password change for your technician account on client Macs. Security auditing needs to know if the Security Update is installed on client Macs.

35 User s last password change dscl. read /Users/ladmin grep --context=3 passwordlastsettime carlson-jamf-mbp:~ bryce$ dscl. read /Users/ladmin grep --context=3 passwordlastsettime <integer>0</integer> <key>failedlogintimestamp</key> <integer>0</integer> <key>passwordlastsettime</key> <real> </real> </dict> </plist>

36 User s last password change!/bin/sh grabs and stores user PW info and strips EPOCH to one number etime=`dscl. read /Users/ladmin grep --context=3 passwordlastsettime` etime2=`echo $etime sed -n 's:.*<real>\(.*\)</real>.*:\1:p'` etime3=`echo ${etime2%.*}` real time rtime=`date -r $etime3 '+%m/%d/%y:%h:%m:%s'` echo "<result>$rtime</result>" exit 0

37 User s last password change!/bin/sh grabs and stores user PW info and strips EPOCH to one number etime=`dscl. read /Users/ladmin grep --context=3 passwordlastsettime` etime2=`echo $etime sed -n 's:.*<real>\(.*\)</real>.*:\1:p'` List users etime3=`echo ${etime2%.*}` cuts tags Variable = real time grave accent rtime=`date -r $etime3 '+%m/%d/%y:%h:%m:%s'` echo "<result>$rtime</result>" $var date exit 0 $var

38 User s last password change

39 User s last password change

40 User s last password change!/bin/sh grabs and stores user PW info and strips EPOCH to one number etime=`dscl. read /Users/ladmin grep --context=3 passwordlastsettime` etime2=`echo $etime sed -n 's:.*<real>\(.*\)</real>.*:\1:p'` etime3=`echo ${etime2%.*}` real time rtime=`date -r $etime3 '+%m/%d/%y:%h:%m:%s'` echo $rtime >> /Library/Globodyne/tech-admin-date-of-lastchange.txt Output

41 Security Update ? /usr/sbin/system_profiler SPInstallHistoryDataType carlson-jamf-mbp:~ bryce$ /usr/sbin/system_profiler SPInstallHistoryDataType Installations: SU_TITLE: Version: Source: Apple Install Date: 4/1/18, 4:40 PM QuickAdd: Version: Source: 3rd Party Install Date: 4/1/18, 5:07 PM

42 Security Update ?!/bin/sh grabs and stores user SU info if Security Update is there swupdatelist=`/usr/sbin/system_profiler SPInstallHistoryDataType grep "Security Update " awk '{ print $3 }'` swq=${swupdatelist%?}; swa=" " if [[ "$swq" == "$swa" ]]; then echo "<result>yes; Security Update is installed.</ result>" else echo "<result>no; Security Update is not installed.</ result>" fi

43 Security Update ?!/bin/sh grabs and stores user SU info if Security Update is there swupdatelist=`/usr/sbin/system_profiler SPInstallHistoryDataType grep "Security Update " awk '{ print $3 }'` swq=${swupdatelist%?}; swa=" " if [[ "$swq" == "$swa" ]]; then echo "<result>yes; Security Update is installed.</ result>" else echo "<result>no; Security Update is not installed.</ result>" fi One var is like the other

44 Security Update ?

45 Security Update ?

46 Security Update ?!/bin/sh grabs and stores user SU info if Security Update is there swupdatelist=`/usr/sbin/system_profiler SPInstallHistoryDataType grep "Security Update " awk '{ print $3 }'` swq=${swupdatelist%?}; swa=" " if [[ "$swq" == "$swa" ]]; then echo Yes SU > /Library/Globodyne/swu stat.txt else echo No SU > /Library/Globodyne/swu stat.txt fi exit 0

47 Security Update ?!/bin/sh grabs and stores user SU info if Security Update is there swupdatelist=`/usr/sbin/system_profiler SPInstallHistoryDataType grep "Security Update " awk '{ print $3 }'` swq=${swupdatelist%?}; swa=" " if [[ "$swq" == "$swa" ]]; then echo Yes SU > /Library/Globodyne/swu stat.txt else echo No SU > /Library/Globodyne/swu stat.txt fi exit 0 Output

48 End User interaction in scripts

49 !/bin/sh userprompt= $(osascript -e 'display dialog Is this a question for the user? buttons {"Yes", "No"} default button "No"')" if [ "$userprompt" = "button returned:yes" ]; then echo They said yes else echo They said no fi

50 !/bin/sh userprompt= $(osascript -e 'display dialog Is this a question for the user? buttons {"Yes", "No"} default button "No"')" if [ "$userprompt" = "button returned:yes" ]; then else fi Command in var echo They said yes echo They said no If $var = then

51 Scenario Mac users in the graphics area of the organization are talking about running low on disk free space. How can we help them clean up?

52 Disk free df / carlson-jamf-mbp:~ bryce$ df / awk '/dev\/disk/ {print substr($5,1,length($5) - 1)}' 59 carlson-jamf-mbp:~ bryce$ df / awk '/dev\/disk/ {print $5}' 59% carlson-jamf-mbp:~ bryce$ df / Filesystem 512-blocks Used Available Capacity iused ifree %iused Mounted on /dev/disk1s % % /

53 !/bin/sh diskusednumonly=`df / awk '/dev\/disk/ {print substr($5,1,length($5) - 1)}'` currentuser=`ls -l /dev/console awk '/ / { print $3 }'` diskusageallowed="90" if [ "$diskusednumonly" -gt "$diskusageallowed" ]; then echo "The drive is more that 90 percent full. Will ask user for clean up." if [ "$(osascript -e 'display dialog "Looks like your boot drive is getting full. Can we clean Caches?" buttons {"Yes", "No"} default button "No"')" = "button returned:yes" ]; then echo "Cleaning end user home folder" rm -rf /Users/$currentuser/Library/Caches/* else echo "No need to clean; user says they will" fi else echo "No need to clean. Drive is free." fi

54 !/bin/sh diskusednumonly=`df / awk '/dev\/disk/ {print substr($5,1,length($5) - 1)}'` currentuser=`ls -l /dev/console awk '/ / { print $3 }'` diskusageallowed="90" Disk free if [ "$diskusednumonly" -gt "$diskusageallowed" ]; then echo "The drive is more that 90 percent full. Will ask user for clean up." if [ "$(osascript -e 'display dialog "Looks like your boot drive is getting full. Can we clean Caches?" buttons {"Yes", "No"} default button "No"')" = "button returned:yes" ]; then echo "Cleaning end user home folder" rm -rf /Users/$currentuser/Library/Caches/* else Nested if Greater than Current user print echo "No need to clean; user says they will" fi else echo "No need to clean. Drive is free." fi

55 Recap Why use a script? Basic anatomy of a script Logic IF, THEN, DO, ELSE, DO, FI WHILE, DO, DONE Operators Results (for Inventory) Extension Attribute To a file End User interaction in scripts osascript - Open Scripting Architecture

56 Good commands to have man ANY COMMAND HERE mdfind "kmditemappstorecategorytype == '*game*'" carlson-jamf-mbp:~ bryce$ mdfind "kmditemappstorecategorytype == '*game*'" /Applications/Chess.app installer -pkg /path/to/some.pkg -target / sudo chmod +x /path/to/some/script.sh

57 Questions?

58 Thank Feedback:

59 Topics that came up after session Apple s Shell Scripting Primer OpenSource/Conceptual/ShellScripting/shell_scripts/shell_scripts.html How do I launch a script as a user at their log in, or not have it auto launch Launch agent More info here: bash Cookbook by O'Reilly Media

60 Topics that came up after session Manuals - Bash Reference Manual BASH Reference - SS64 Bash Index A-Z - The Linux Documentation Project: Guides - Bash cheat sheet PDF, from Learn Code the Hard Way - ShellCheck shell script analysis tool - explainshell.com - bash keyboard shortcuts Bash SS64.com - MAN PAGES - HOW TO READ MAN PAGES - SS64 Bash Index A-Z Thanks to Joseph K. for these!

61 Topics that came up after session Thanks to Joseph K. for these! - Bash Guide for Beginners - BASH Programming - Introduction HOW-TO - The Bash Academy - Advanced Bash-Scripting Guide - Linux Tutorial Introduction Linux Survival - Bash Scripting Tutorial - Ryans Tutorials - Learn Bash Scripts - Tutorial - YouTube - Learn X in Y Minutes: Scenic Programming Language Tours - The Beginner s Guide to Shell Scripting: The Basics - UNIX / Linux Tutorial for Beginners - Getting to Know the Command Line David Baumgold - The Linux Basics Course - YouTube - Unix for Mac OS X Users Introduction.html - developer.apple.com - Shell Scripting Primer

62 Topics that came up after session Thanks to Joseph K. for these! - Terminus srchtrk=index%3a0%0alinktypeid%3a2%0aq%3abash%0apage%3a1%0as%3arelevance%0asa%3atrue%0aproducttypeid%3a2 - Up and Running with Bash Scripting - LinuxCommand.org: Learn the Linux command line. Write shell scripts. - Learn the Linux Command Line: The Basics - Udacity - Linux Command Line Basics - Learn Python The Hard Way - Command Line Crash Course - Learn the Command Line Codecademy - Master Command Line Interface Basics JAMF Software