This guide is good:
https://derflounder.wordpress.com/category/createosxinstallpkg/

We do it a bit differently though. I have a script that runs first to check hard drive space and that they are eligible for the update. Once that's done it runs a policy that caches the installer on the machine, then another policy runs to run the cached installer.

Because we use policies and scripts, we can add a self service start as well if we want to give people an option to do it on their own time.

The nice thing is that this process is pretty much the same no matter was OS your upgrading to (assuming is a Mac one). So once you learn to do it once and have it working in your environment, not that hard to change it for the next OS.

I've used this document to release OS upgrade.
https://resources.jamf.com/documents/technical-papers/Deploying-OS-X-v10.7-or-Later-with-the-Casper-Suite.pdf

Since you are running this unattended, instead of putting the policy as self service item, you can probably do the recurring check-in trigger to run the update.

We keep it as self service and since we don't have the summer break to run the upgrades so we have to communicate to the user to run the upgrade when they have time to do so.

I've used the Jamf approach mentioned by @tak10 in the past but have since adopted @Rosko's workflow (with some slight modifications). @Rosko's approach can be found here.

@sepiemoini Does this process allow for no user interaction when FV2 is enabled? I've noticed that with the CreateOSXinstallpkg process, if I have FV2 enabled, the user needs to authenticate after a restart.

Disregard. I just re-read the Github readme. No user interaction required !!

@roiegat I've followed that guide (though I skipped the bit about extra packages as I don't need anything else to be installed), however nothing seems to be happening after reboot, it just goes to the 10.10 login window. I want to do it using Casper Remote rather than Self Service, so I removed the user interaction bits from the script, that shouldn't make a difference?

@sepiemoini That Rosko script seems to be for going from 10.11 to 10.12? I'm wanting to go from 10.10 to 10.11.

@tak10 I'll try this method instead as the createOSInstallPkg method does not seem to be working for me.

EDIT: @tak10's method seems to be working as I am seeing the OS install screen now. Thanks for the help everyone!

@DanJ_LRSFC @Rosko's method works for 10.10! I imagine it'll work for earlier releases as well and plan to test it on 10.9 today. We don't have too many legacy macOS devices so I am only concerned primarily with 10.10-10.11.

@DanJ_LRSFC I usually tell it to reboot to the installer partition. It's part of the reboot settings.

createOSInstallPkg worked fine with no user interaction here in testing yesterday. I did end up having to specify a restart however, as the pkg it generates does not appear to have that built-in.

Good day all!

@DanJ_LRSFC The solved post will work until you are looking to upgrade to 10.12 which is where the rules of the game got changed. Then you will need to utilize the startosinstall binary if you want to have a complete in-place upgrade that has no user interaction which is what I did in my workflow. This workflow should work for any previous OS upgrades as well, just wasn't required.

I've also tested with the createOSInstallPkg, but had issues with authenticated reboots not processing correctly which is why I wrote up this workflow.

Three cheers for @Rosko's tried and true method!

@Rosko I'll second that cheer. Testing out the method now and it's smooth so far. Will have to add a policy after the install is finished to clean off that installer package.

@roiegat You could also add something like this to the same script ;)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 

# CREATE FIRST BOOT SCRIPT

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 



/bin/mkdir /usr/local/jamfps



/bin/echo "#!/bin/bash

## First Run Script to Install Profile to Skip iCloud and Siri

## then cleanup the files.



## Install mobileconfig profiles

/usr/bin/profiles -I -F /Users/Shared/SkipiCloudSetup.mobileconfig

/usr/bin/profiles -I -F /Users/Shared/SkipSiriSetup.mobileconfig

/bin/sleep 3



## Clean up files

/bin/rm -fdr /Users/Shared/Install macOS Sierra.app

/bin/rm -fdr /Users/Shared/SkipiCloudSetup.mobileconfig

/bin/rm -fdr /Users/Shared/SkipSiriSetup.mobileconfig

/bin/sleep 2



## Remove LaunchDaemon

/bin/launchctl unload -w /Library/LaunchDaemons/com.jamfps.installProfiles.plist

/bin/rm -f /Library/LaunchDaemons/com.jamfps.installProfiles.plist



## Reset cfprefsd

/usr/bin/killall cfprefsd



exit 0" > /usr/local/jamfps/finishOSInstall.sh



/usr/sbin/chown root:admin /usr/local/jamfps/finishOSInstall.sh

/bin/chmod 755 /usr/local/jamfps/finishOSInstall.sh



# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 

# LAUNCH DAEMON

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 



/bin/echo "<?xml version="1.0" encoding="UTF-8"?> 

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 

<plist version="1.0"> 

<dict>

    <key>Label</key> 

    <string>com.jamfps.installProfiles</string> 

    <key>ProgramArguments</key> 

    <array> 

        <string>/usr/local/jamfps/finishOSInstall.sh</string>

    </array>

    <key>RunAtLoad</key>

    <true/>

</dict> 

</plist>" > /Library/LaunchDaemons/com.jamfps.installProfiles.plist



##Set the permission on the file just made.

/usr/sbin/chown root:wheel /Library/LaunchDaemons/com.jamfps.installProfiles.plist

/bin/chmod 644 /Library/LaunchDaemons/com.jamfps.installProfiles.plist

Something similar to this will be added to the GitHub version when I get time. Won't include the mobileconfig profiles, but otherwise I will basically be adding that verbatim.

While @Rosko's post-install script is probably infinitely better, I have include the following into my organization.

#!/bin/bash

#macOS Sierra (Post-Install) Script:



# Remove "Install macOS Sierra.app" installer from /Users/Shared/.

rm -rf /Users/Shared/Install macOS Sierra.app; 



exit 0;

Nice job @sepiemoini! All that matters is we are able to accomplish what we set out to do :)

Also, I had a few minutes, so I did go ahead and update the GitHub repo with the first boot script pieces.

@sepiemoini Would you mind sharing your quit common applications script? We are doing something very similar to your setup, and wanted to compare.

@csanback Sure! Fair warning that it's SUPER basic and could be customized to your liking.

#!/bin/bash



# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 

#  Quit Common Applications

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 



osascript -e 'quit app "Firefox"'

osascript -e 'quit app "Google Chrome"'

osascript -e 'quit app "Safari"'

osascript -e 'quit app "iTunes"'

osascript -e 'quit app "Slack"'

osascript -e 'quit app "Excel"'

osascript -e 'quit app "Outlook"'

osascript -e 'quit app "PowerPoint"'

osascript -e 'quit app "Word"'



exit 0

I am sure that there are much simpler methods to achieve the same goal but this is working for my organization. I prioritized closing browsers and Office 2016 and added Slack and iTunes as they're sluggish. It's worth noting that in my Self Service description (set that users have to view it), it states that all work should be saved, blah, blah, blah. You can even use Automator (/Applications/Utilities/Automator.app) to create a custom app that closes EVERYTHING except Self Service for instance.

@Rosko Nice work, the first boot script is the icing! That recon at first boot is critical.

@Rosko So the first few tests I ran with this script I'm seeing the installer app delete as expected, but the recon and LD delete is not happening.

Nothing obvious in the logging. Any thoughts on that?

@Rosko I'm seeing similar issue as @dpertschi. The LD still exists on the system when the process is finished but I don't think it's loaded. I'm not sure if the recon is happening either. The workflow on my test VMs has the computer reboot about half way through and it's at that point that I see the JSS notify me that the computer has fallen out of one smart group and into another. I guess I would expect the recon to happen after the installation is fully completed. I'll do some more testing and add some logging statements to see if I can figure out what is and isn't happening. Otherwise this workflow is quite nice. Thanks for sharing it!

Edit: I forgot to mention that the finishOSInstall.sh script is also in /usr/local/jamfps. I'm not sure if that is supposed to be deleted at some point or not.

@Rosko @sepiemoini awesome work guys!!!!!

Thanks, @__Uss! I've even added a jamfHelper notification for users running once daily to encourage the upgrade.

@sepiemoini

would you mind sharing your jamfHelper notification to encourage the upgrade.

@sepiemoini
Id also like to see that JAMFhelper code for the above.
Cheers!

@sepiemoini Nice work on the jamfHelper notification. I would love to take a look at your code as well.