Upgraded Deploy Studio on svr-mac-francis to 1.6.12 for yosemite support

I have upgraded the Deploy Studio Instance on svr-mac-francis to 1.6.12 so that it can support yosemite

New Boot Set created

Yosemite OSX Image Tests and what works

Base Mavericks Image from DS
Upgrade to Yosemite

Software
Office 11 - Yes
DF - No
Net Extender - Yes although have to use IP not DNS to connect (need fully qualified names)
ARD - no but need to check latest version in office
Adobe CS6 Mastr Collection Patched -
Final Cut X - No - http://forums.macrumors.com/showthread.php?t=1740846
Final Cut X Additional Content
iTunes Setup
Remove AppStore
Sophos
Logic Pro
Ableton Live


Mac+OS+X+10.10+-+What+Works
https://wiki.brown.edu/confluence/display/CISDOC/Mac+OS+X+10.10+-+What+Works

Limiting Time machine backups to out of hours

Following discussions it was decided to limit time machine to only backup out of hours to limit the network traffic.

• The Time Machine service has been disabled as standard on the servers

• An ARD task has been scheduled to run at 7pm which turns this service back on -Send Unix Command  - run as root - 'tmutil enable' 

• An ARD task has been scheduled to run at 7am which turns this service back on  - Send Unix Command  - run as root - 'tmutil disable'

Time Machine Service on svr-mac-agnes

testing out storage for labs to backup via time machine to svr-mac-agnes

server plus thunderbolt storage attached to:

• svr-mac-urban (sports live)
• svr-mac-macrina (jam live)

• still to do svr-macrena (live music)

Staff MacBook Pro 2014 - JL 26/03/14

 Wouldn't netboot so:

Needed to create a new net boot set for DeployStudio (for mavericks 10.9.2) so:

• downloaded DS to client and installed
• selected 'create new boot set' and chose svr-mac-francis (although wrong login but works with correct one)
• copied .nbi onto svr-mac-francis /library/NetbootSP0/ and enabled through netboot service on server admin (disabled other)
• netbooted the client mac into DS on svr-mac-francis
• cleared nvram etc
• selected 'create master from volume'
• created 'MacBook_Pro_2014' master
• created a new workflow on DS on svr-mac-francis (copy of staff laptop but change step one 'restore master' to 'MacBook_Pro_2014' - new workflow = Staff MacBook pro 2014
• reboot client and boot back into DS on svr-mac-francis
• cleared nvram etc and format hd
• select Staff MacBook pro 2014 workflow and run
• after install bound manually to AD/OD and created local admin
• ran updates

After -
standard .nbi enabled through netboot service on server admin of svr-mac-francis
(disabled Macbook Pro 2014 nbi )

Tested normal workflows and works fine

Staff Machines Mavericks Procedure

boot onto deploy studio on svr-mac-francis

normal nvram and format options

choose 'Mavericks Staff Laptop' workflow

Post install:

• Install any software required
• Software & Apple Updates
• Flash Updates
• Remove Office (if required)
• Add cloud printing
• Create local user for staff (administrator) for off campus access

Current University Mac Infrastructure

Restoring Lion Image on Mavericks Hardware

via Deploy Studio

• First test using quick format did not work
• Now hard drive formatting at higher level to see if removes all data on drive before trying again (takes 3 hours to format via disk utility option 3)

Update Test Using ARD and Scripts

This is the current setup and works in testing:

Deep Freeze on 2 test machines set to thaw between 0.00 and 4am every day

4 tasks on ARD

1. Update Flash at 0.30 every day (script on http://marjonmacsupport.blogspot.co.uk/2014/03/script-to-update-flash-being-tested-to.html)
2. Check for Any Updates at 1am (script on http://marjonmacsupport.blogspot.co.uk/2014/03/unix-command-to-update-via-ard.html)
3. Install rebind package at 3am
4. Restart Clients at 3.40 am

Unix Command to Update Client (Apple Updates) via ARD

usr/sbin/softwareupdate -i -a

run as root

Refresh mcx settings from OD (group settings) via unix and ARD

sudo mcxrefresh -n ladmin

Send Unix Command via ARD to create new Deep Freeze schedule

DFXPSWD="normal" /Library/Application\ Support/Faronics/Deep\ Freeze/deepfreeze -u "admin" -p addSchedule "Software Update" -a on -d wednesday -b 18:00 -e 22:00 -o off -i on -l on -w 17:55 -m “Maintenance will begin in %d minutes.” -s off

Script to update Flash being tested to update via ARD

cat#!/bin/sh

# Script to download and install Flash Player.
# Only works on Intel systems.

# Change working directory to /tmp

/usr/bin/cd /tmp

#download flash dmg. Yes I have agreed to all of the licensing terms and am fully compliant with everything in the whole world. Add -s to curl if you hate progress meters
echo downloading

/usr/bin/curl -O http://fpdownload.macromedia.com/get/flashplayer/current/licensing/mac/install_flash_player_12_osx.dmg

# Mount the install_flash_player_12_osx.dmg disk image in /Volumes

echo "`date`: Mounting installer disk image."
/usr/bin/hdiutil attach install_flash_player_12_osx.dmg -nobrowse -noverify -noautoopen

echo "`date`: Installing..."

/usr/sbin/installer -dumplog -verbose -pkg "/Volumes/Flash Player/Install Adobe Flash Player.app/Contents/Resources/Adobe Flash Player.pkg" -target "/"

echo "`date`: Unmounting installer disk image."

# Clean-up

# Unmount the install_flash_player_12_osx.dmg disk image from /Volumes

/usr/bin/hdiutil eject -force /Volumes/Flash\ Player

# Remove the install_flash_player_12_osx.dmg disk image from /tmp

/bin/rm -rf /tmp/install_flash_player_12_osx.dmg

New Base Image created osx_mavericks_i386.dmg11_2_14

New Base Image created osx_mavericks_i386.dmg11_2_14 on svr-mac-francis

based on restore of osx_maverick_23_01_14i386.dmg

Already on image

PPD
Office (+Personalised)

Added
English proj office personalisation
login script
flash updater

Deep Freeze - testing thaw periods and Apple Update Server

Mac mini with Jam 10.7.5  image (in mac test room)
 

• DeepFreeze set to thaw at 0.00 till 4am every day

Mac Updated succesfully latest patches and application updates via svr-mac-agnes
Waiting to see on next Flash update test

• Remote desktop on iMac (old Magdeburg) scheduled to install 'Rebind Jam' package at 2am every day - rebind the mac to AD

Mac mini with  Mavericks image

• Dowloaded and installed trial Deep Freeze from faronics website (need new version for Mavericks which we don't have)

Currently testing

Mavericks OSX Marjon Deploy Studio workflows (on svr-mac-francis)

Note: Include MS Office on image before taking back to server 

Mavericks OSX - what works -

https://wiki.brown.edu/confluence/pages/viewpage.action?pageId=88506535


JAM

All works except After Effects which needs to be updated from 11.0.2 to 11.0.4 to work on Mavericks

Need to download trial updater (AfterEffectsTrial-11.0.4-mul-AutoUpdate.dmg) and run after imaged

 http://blogs.adobe.com/aftereffects/2013/12/after-effects-cc-12-2-december-2013-update.html

Live Music

All works but need to update:

Ableton Live from 8.34 to 8.4.2
Logic Pro from 9.1.7 to 9.1.8

 Sports

All works

Instructions for Sportscode - http://www.sportstec.eu/news/256351/upgrading-to-os-x-mavericks

Marjon Mac Server List

svr-macaroon (OSX 10.7.5 mac-mini-server)
 - Open Directory Server - used to push out preferences to workgroups by Workgroup Manager

svr-mac-francis (OSX 10.7.5 mac-mini-server)
marianne (OSX 10.8.2 mac-mini-server)
- Deploy Studio servers used to create and image macs

svr-minervius (OSX 10.7.5  iMac server)
- mac printing queue server

svr-macarena (OSX 10.8.2 mac-mini-server)
- server used to share Media Live (Nathan)

svr-mac-urban (OSX 10.8.2 mac-mini-server)
- server used to share Sports Live (Ethan)

svr-macrina (OSX 10.8.2 mac-mini-server)
- server used to share Jam Live (Stefan)

svr-mac-agnes (OSX 10.9.1 mac-mini-server)
- Software Update Server

svr-magdeburg (OSX 10.7.5  iMac server)
- test network server (Casper Suite demo server)

Daffy (OSX 10.7.5  MacBook server)
- backup Deploy Studio and ISJ mac

Software Update Server

svr-mac-agnes.net.marjon.ac.uk (a mavericks server)

automatically downloads updates but not enabled at the moment

set 'Software Update' on Workgroup Manager on svr-macaroon (per group) to:

• http://svr-mac.agnes.net.marjon.ac.uk:8088/index.sucatalog

Scripts

Add scripts to /Library/Scripts directory of the image and to Workgroup Manager on svr-macaroon under Login-Items

• loginsport.sh (for sport) etc

- automator loginscript created by ISJ & CM:

--------------------
'mount and record who's logged in then unmount
mkdir /Volumes/BarbLoLo

mount_smbfs //AppleMacLogon:mount_smbfs-VolumeShare@barbara.net.marjon.ac.uk/Logonoff$/macs  /Volumes/BarbLoLo
dt5=$(date "+%d%h%Y")

dt6=$(date)
printf "$USER, $HOSTNAME, $dt6\r\n">>/Volumes/BarbLoLo/on-$dt5.txt

umount /volumes/BarbLoLo


'load safari and show pages
open -a /Applications/Safari.app/ http://staffnews
open -a /Applications/Safari.app/ http://hub.marjon.ac.uk

'load shared drive
mkdir /volumes/shareddrive

mount_afp "afp://sportslive:sportslive@svr-mac-urban/Sports Live" /Volumes/shareddrive/

'create alias on desktop
/usr/bin/osascript > /dev/null <<EOT
try
tell application "Finder"
set macSrcPath to POSIX file "/Volumes/shareddrive"
make new alias file at desktop to macSrcPath
end tell
end try
EOT
-----------------

• personaliseoffice.sh

LaunchAgents (Library/LaunchAgents)

  Add the following to image under Library/LaunchAgents

• com.mj.personaliseoffice.plist (oofice personlisation)

An agent is a process that runs in the background on behalf of a particular user. Agents are useful because they can do things that daemons can't, like reliably access the user's home directory or connect to the window server.

A launchd agent is like a launchd daemon, except that it runs on behalf of a particular user. It is launched by launchd, typically as part of the process of logging in the user.

A third party launchd agent should be installed by adding a property list file to the ~/Library/LaunchAgents directory (to be invoked just for this user) or /Library/LaunchAgents directory (to be invoked for all users).

Mac printing

Add Mac_Printing.ppd to /Library/Printers/PPDs/Content/Resources/conffigured_ppds/ and add printer on image

Add Managed printers to Group on Workgroup Manager on svr-macaroon

Personalise Office

 Add the following to base image

~/Library/Preferences/com.microsoft.autoupdate2.plist
~/Library/Preferences/com.microsoft.error_reporting.plist
~/Library/Preferences/com.microsoft.office.plist
~/Library/Preferences/com.microsoft.office.setupassistant.plist
 System/Library/User Template/English.lproj/Library/Preferences/com.microsoft.autoupdate2.plist
System/Library/User Template/English.lproj/Library/Preference/com.microsoft.autoupdate2.plist
System/Library/User Template/English.lproj/Library/Preference/com.microsoft.error_reporting.plist
System/Library/User Template/English.lproj/Library/Preference/com.microsoft.office.plist
System/Library/User Template/English.lproj/Library/Preference/com.microsoft.office.setupassistant.plist

also

/Library/Scripts/company/personalizeoffice.sh
 System/Library/User Template/English.lproj/Library/LaunchAgents//personalizeoffice.sh

http://wiki.afp548.com/index.php/Office_2011_Settings

Flash Updates

• add flash installer to image 
• run flash silent installer so that it updates automatically

http://mattsmacblog.wordpress.com/2012/06/10/adobe-flash-11-3-silent-update-package/