Identifying that a PKG was run by Jamf Pro?

@straffin Speaking theoretically (as in never tried it myself), you could do a tail -n 1 /var/log/jamf.log | grep yourpackagenamehere.pkg and see if it comes back non-empty. That should indicate the jamf binary is currently attempting to installing your package.

Use the pkgutil command to look for the presence of a package receipt.

To list all package receipts run /usr/sbin/pkgutil list --pkgs.

To find a specific package receipt use something like /usr/sbin/pkgutil --pkgs=com.microsoft.Edge.Beta.

Should see it under the computer record too, installed by Installer vs installed by Jamf Pro (policy).

Maybe a smart group based on 'Packages installed by Casper' ? I use that quit often

Thanks for the suggestions so far! Sorry for any lack of clarity in my request, but @mm2270 has the sense of it. I'm looking for code that would run during the pkg install as part of the pkg that identifies whether a person is running the install or a process is running the install.

I wasn't sure if there was a standard target location for Jamf Pro downloads or if it just tossed things into a temp directory. Looking for a location of /Library/Application Support/JAMF/Downloads/ should work. I also like the ps option, perhaps looking for a uid of 0 to see that a system-level process is running it.

Thanks again!

@straffin Glad to help! Just be aware that the /Library/Application Support/JAMF/Downloads/ directory always exists, or at least always exists after at least one package is installed by a policy. You would have to make sure you look inside that directory in your script for the package name itself, or like I mentioned, see if installer is active and installing something from that directory.
Either way though, that should get you where you're looking to go.

Based on what I've seen in other installers (particularly those that allow for pre-configuration files residing in the same directory as the installer), there is a built-in $PACKAGE_PATH variable that contains the parent directory of the pkg being installed. I should be able to simply test for $PACKAGE_PATH = /Library/Application Support/JAMF/Downloads/ to identify that the pkg is being installed by Jamf Pro. Thanks again!

Interesting thread, so much to learn.

@straffin Curious does the trailing slash need to be removed for $PACKAGE_PATH to work? Tested this as a preinstall script in a test PKG and seems to work (considering both Downloads and Waiting Room*:

#!/bin/bash

currentDir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
cd "$currentDir"
downloadsDir="/Library/Application Support/JAMF/Downloads"
waitingRoomDir="/Library/Application Support/JAMF/Waiting Room"

if [ "$currentDir" != "$downloadsDir" ] && [ "$currentDir" != "$waitingRoomDir" ];
then
    echo "Installing using Installer.app"
    echo "Running commands"
else
    echo "Installing using jamf"
    echo "Runninng alternate commands"
fi

Will try using $PACKAGE_PATH when I have time later.