So I don't package or create policies to patch and deploy zoom. That is all automated. Again, I highly recommend AutoPKG (or AutoPKGr ) + JSS Importer to fully automate your package deployment.
I open sourced my policy model and JSS Importer templates for patching, you can view it here
Replacing CFBundleShortVersionString with CFBundleVersion in the original script worked for me. CFBundleVersion reports the version "old style", 4.5.3284.0829 for the currently latest version.
Needs to be changed in 2 places in the script, "currentinstalledver = ...." and "newlyinstalledver = ..." lines.
@olev_mj GREAT catch, replacing "CFBundleShortVersionString" with "CFBundleVersion" in those two places resolved on our end as well. Thanks!
Each time this script runs it appends to the plist, not constructing a new one. Even if I delete it, it will come back with all old additions. Anyone experience this? How do I ensure each time this script runs (as I use it for forced upgrades) it's adding to the plist!
Zoom is a signed and notarized app, if you alter the Info.plist you will break app signing and the app will not work FYI. I broke Zoom recently altering the version string trying to test update UX, just a FYI
Sorry, I haven't been able to keep this updated as much as I would have liked. Many thanks to @olev_mj for finding the version bug! The full newest version, that seems to work for me, is the following:
#!/bin/sh
#####################################################################################################
#
# ABOUT THIS PROGRAM
#
# NAME
# ZoomInstall.sh -- Installs or updates Zoom
#
# SYNOPSIS
# sudo ZoomInstall.sh
#
####################################################################################################
#
# HISTORY
#
# Version: 1.1
#
# 1.1 - Shannon Johnson, 27.9.2019
# Updated for new zoom numbering scheme
# Fixed the repeated plist modifications
#
# 1.0 - Shannon Johnson, 28.9.2018
# (Adapted from the FirefoxInstall.sh script by Joe Farage, 18.03.2015)
#
####################################################################################################
# Script to download and install Zoom.
# Only works on Intel systems.
#
# Set preferences
hdvideo="true"
ssodefault="true"
ssohost="psu.zoom.us"
# choose language (en-US, fr, de)
lang=""
# CHECK TO SEE IF A VALUE WAS PASSED IN PARAMETER 1 AND, IF SO, ASSIGN TO "lang"
if [ "$4" != "" ] && [ "$lang" == "" ]; then
lang=$4
else
lang="en-US"
fi
pkgfile="ZoomInstallerIT.pkg"
plistfile="us.zoom.config.plist"
logfile="/Library/Logs/ZoomInstallScript.log"
# Are we running on Intel?
if [ '`/usr/bin/uname -p`'="i386" -o '`/usr/bin/uname -p`'="x86_64" ]; then
## Get OS version and adjust for use with the URL string
OSvers_URL=$( sw_vers -productVersion | sed 's/[.]/_/g' )
## Set the User Agent string for use with curl
userAgent="Mozilla/5.0 (Macintosh; Intel Mac OS X ${OSvers_URL}) AppleWebKit/535.6.2 (KHTML, like Gecko) Version/5.2 Safari/535.6.2"
# Get the latest version of Reader available from Zoom page.
latestver=`/usr/bin/curl -s -A "$userAgent" https://zoom.us/download | grep 'ZoomInstallerIT.pkg' | awk -F'/' '{print $3}'`
echo "Latest Version is: $latestver"
# Get the version number of the currently-installed Zoom, if any.
if [ -e "/Applications/zoom.us.app" ]; then
currentinstalledver=`/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion | sed -e 's/0 //g' -e 's/(//g' -e 's/)//g'`
echo "Current installed version is: $currentinstalledver"
if [ ${latestver} = ${currentinstalledver} ]; then
echo "Zoom is current. Exiting"
exit 0
fi
else
currentinstalledver="none"
echo "Zoom is not installed"
fi
url="https://zoom.us/client/${latestver}/ZoomInstallerIT.pkg"
echo "Latest version of the URL is: $url"
echo "`date`: Download URL: $url" >> ${logfile}
# Compare the two versions, if they are different or Zoom is not present then download and install the new version.
if [ "${currentinstalledver}" != "${latestver}" ]; then
# Construct the plist file for preferences
echo "<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>nogoogle</key>
<string>1</string>
<key>nofacebook</key>
<string>1</string>
<key>ZDisableVideo</key>
<true/>
<key>ZAutoJoinVoip</key>
<true/>
<key>ZDualMonitorOn</key>
<true/>" > /tmp/${plistfile}
if [ "${ssohost}" != "" ]; then
echo "
<key>ZAutoSSOLogin</key>
<true/>
<key>ZSSOHost</key>
<string>$ssohost</string>" >> /tmp/${plistfile}
fi
echo "<key>ZAutoFullScreenWhenViewShare</key>
<true/>
<key>ZAutoFitWhenViewShare</key>
<true/>" >> /tmp/${plistfile}
if [ "${hdvideo}" == "true" ]; then
echo "<key>ZUse720PByDefault</key>
<true/>" >> /tmp/${plistfile}
else
echo "<key>ZUse720PByDefault</key>
<false/>" >> /tmp/${plistfile}
fi
echo "<key>ZRemoteControlAllApp</key>
<true/>
</dict>
</plist>" >> /tmp/${plistfile}
# Download and install new version
/bin/echo "`date`: Current Zoom version: ${currentinstalledver}" >> ${logfile}
/bin/echo "`date`: Available Zoom version: ${latestver}" >> ${logfile}
/bin/echo "`date`: Downloading newer version." >> ${logfile}
/usr/bin/curl -sLo /tmp/${pkgfile} ${url}
/bin/echo "`date`: Installing PKG..." >> ${logfile}
/usr/sbin/installer -allowUntrusted -pkg /tmp/${pkgfile} -target /
/bin/sleep 10
/bin/echo "`date`: Deleting downloaded PKG." >> ${logfile}
/bin/rm /tmp/${pkgfile}
#double check to see if the new version got updated
newlyinstalledver=`/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion`
if [ "${latestver}" = "${newlyinstalledver}" ]; then
/bin/echo "`date`: SUCCESS: Zoom has been updated to version ${newlyinstalledver}" >> ${logfile}
# /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -title "Zoom Installed" -description "Zoom has been updated." &
else
/bin/echo "`date`: ERROR: Zoom update unsuccessful, version remains at ${currentinstalledver}." >> ${logfile}
/bin/echo "--" >> ${logfile}
exit 1
fi
# If Zoom is up to date already, just log it and exit.
else
/bin/echo "`date`: Zoom is already up to date, running ${currentinstalledver}." >> ${logfile}
/bin/echo "--" >> ${logfile}
fi
else
/bin/echo "`date`: ERROR: This script is for Intel Macs only." >> ${logfile}
fi
exit 0
I changed line 62 and 138 to check the current version without the new formatting from Zoom.
/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleShortVersionString
to
/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleShortVersionString | sed -e 's/0 //g' -e 's/(//g' -e 's/)//g'
I am sure there is a more elegant solution but this is now running without producing an error.
Posted: 7/2/2019 at 6:49 PM CDT by tlarkin
I would urge everyone to look at something like AutoPKG to build the packages for you and then something like JSS Importer to automate the integration into jamf. Running curl scripts on endpoints as root is really not a great practice
Just wanted to post this as a reminder. curl scripts on endpoints is a pretty risky move
Hello guys, this is an awesome script thank you for that. However i have a question. This script only updates and installs zoom application, but in our environment we use zoom outlook plug in as well. is there any way to incorporate that in to that script as well?
I don't think Zoom recommends the plug in on Catalina ...
C
When I run this script from Terminal it works fine, but when I run it a script policy in Jamf it fails. The log file is empty.
I updated the script to remove SSO, otherwise, everything else is the same. Ideas?
# Set preferences
hdvideo="true"
ssodefault="false"
ssohost=""
@ekarazhov You can deploy the plugin now though the O365 Admin portal. It will deploy to all clients (you will need to remove the old version) and be available to outlook on the web as well.
https://support.zoom.us/hc/en-us/articles/115005223126-Zoom-for-Outlook-Add-In-Web-and-Desktop-
Anyone else getting this error after it has done an update?
Runs fine in terminal, but doesn't like it as part of the script
/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleShortVersionString
Thanks @thebeard a handy little add-in for Outlook, but this doesn't help if I need to join someone else's Zoom meeting.
@GregE use this instead
currentinstalledver='/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion'
this will give you the correct value
Current version as of 3/10/20 is 4.6.18176.0301 (what the script calls for along with the download link) - technically 4.6.7.18176.0301 is whats installed, so its missing the .7.
@omatsei im curious about one thing, maybe its just difficult for me to understand.
you have all the settings go to a temp PLIST location but i dont see what its called for or written elsewhere.
</plist>" >> /tmp/${plistfile}
how does that write to or even overwrite the current/nonexistent us.zoom.config.plist located in /Library/Preferences/us.zoom.config.plist?
currently im doing the slowpoke version of deploying via composer > JSS to ensure things go as expected.
i am updating and testing your script, but would it not be more prudent to write directly to the file location, the information?
eg
#!/bin/sh
zoomPLIST='/Library/Preferences/us.zoom.config.plist'
<key>ZAutoSSOLogin</key>
<string>https://example.zoom.us</string>
</dict>
</plist>" >${zoomPLIST}
technically, i would do a
#!/bin/sh
zoomPLIST='/Library/Preferences/us.zoom.config.plist'
/bin/cat <<'EOF' >$zoomPLIST
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>ZRemoteControlAllApp</key>
<true/>
<key>ConfirmWhenLeave</key>
<true/>
EOF
unless i am missing something with the where the PLIST data goes, cuz thats the intriguing part.
you can add some error checking in there, for example, if your last addition to the PLIST was
<key>ZAutoFitWhenViewShare</key>
<true/>
then you can grep that in an if/then statement to the write.
Can you clarify the plist part?
thanks!
EDIT:
we can ignore that, but still wondering if cat makes sense also
from ZOOM doc:
Once the .plist file is complete, it will need to be named us.zoom.config.plist. When deploying, as long as this file is in the same folder as the ZoomInstallerIT.pkg, the installation will automatically put the .plist file into the /Library/Preferences folder.
Thanks @GregE, I made the changes you suggested. The script still works when executed manually from a file, but fails when Jamf executes the script as a policy. I get "Policy error code: 2100" when I verbose the policy using "jamf policy -event"
@stephen.watson i think you missed my post. it gives you the answer you need :)
Apologies @beeboo, I thanked the wrong user in my last post. It's still not working after applying your change :(
@stephen.watson can you post the part where you think its broken, or even the whole part?
for reference, here are some changes i made
#!/bin/sh
installedVERS=$(/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion)
is yours in quotes or a variable like that?
this should replace my previous line of current version
let me know if that works for you
I have tried the script update 9/27/2019 by omatsei, and the updates posted 10/22/2019 by kbingham, the script looks good, but I am getting syntax errors: Script result: /Library/Application Support/JAMF/tmp/Zoom Update: line 153: unexpected EOF while looking for matching ``'
/Library/Application Support/JAMF/tmp/Zoom Update: line 157: syntax error: unexpected end of file
Any thoughts on this? I combed through the script and am not finding much to shed light on this. Any help is greatly appreciated.
Post a screenshot @CaptainCarl but I'll place my bet that you have/don't have a space in the correct spot.
Sounds to me as if a closing quote sign is missing somewhere. Multi-line echo commands are not really to my liking.
Finally found my failure point. 10 seconds wasn't enough time for some Macs to install Zoom before it deleted the install package. Changing it to 20s resolved the random failures.
/usr/sbin/installer -allowUntrusted -pkg /tmp/${pkgfile} -target /
/bin/sleep 20
/bin/echo "`date`: Deleting downloaded PKG." >> ${logfile}
/bin/rm /tmp/${pkgfile}
Can anyone post a perfected version of this script and your guidelines for deploying it? We would use it, but I could not retroactively install any/all of the modifications mentioned in this thread myself ;-(
Added a few echo outs when troubleshooting the failures I was getting.
Policy 1:
Recurring check-in, Script (below), Smart Group (Application Title does not have zoom.us.app)
Policy 2:
Login, run once per week, Script (same one), Smart Group (Application Title has zoom.us.app).
* You'll need to modify: sso host
#!/bin/sh
#####################################################################################################
#
# ABOUT THIS PROGRAM
#
# NAME
# ZoomInstall.sh -- Installs or updates Zoom
#
# SYNOPSIS
# sudo ZoomInstall.sh
#
####################################################################################################
#
# HISTORY
#
# Version: 1.1
#
# 1.1 - Shannon Johnson, 27.9.2019
# Updated for new zoom numbering scheme
# Fixed the repeated plist modifications
#
# 1.0 - Shannon Johnson, 28.9.2018
# (Adapted from the FirefoxInstall.sh script by Joe Farage, 18.03.2015)
#
####################################################################################################
# Script to download and install Zoom.
# Only works on Intel systems.
#
# Set preferences
hdvideo="true"
ssodefault="true"
ssohost="xxx.zoom.us"
# choose language (en-US, fr, de)
lang=""
# CHECK TO SEE IF A VALUE WAS PASSED IN PARAMETER 1 AND, IF SO, ASSIGN TO "lang"
if [ "$4" != "" ] && [ "$lang" == "" ]; then
lang=$4
else
lang="en-US"
fi
pkgfile="ZoomInstallerIT.pkg"
plistfile="us.zoom.config.plist"
logfile="/Library/Logs/ZoomInstallScript.log"
# Are we running on Intel?
if [ '`/usr/bin/uname -p`'="i386" -o '`/usr/bin/uname -p`'="x86_64" ]; then
## Get OS version and adjust for use with the URL string
OSvers_URL=$( sw_vers -productVersion | sed 's/[.]/_/g' )
## Set the User Agent string for use with curl
userAgent="Mozilla/5.0 (Macintosh; Intel Mac OS X ${OSvers_URL}) AppleWebKit/535.6.2 (KHTML, like Gecko) Version/5.2 Safari/535.6.2"
# Get the latest version of Reader available from Zoom page.
latestver=$(/usr/bin/curl -s -A "$userAgent" https://zoom.us/download | grep 'ZoomInstallerIT.pkg' | awk -F'/' '{print $3}')
echo "Latest Version is: $latestver"
# Get the version number of the currently-installed Zoom, if any.
if [ -e "/Applications/zoom.us.app" ]; then
currentinstalledver=$(/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion)
echo "Current installed version is: $currentinstalledver"
if [ ${latestver} = ${currentinstalledver} ]; then
echo "Zoom is current. Exiting"
exit 0
fi
else
currentinstalledver="none"
echo "Zoom is not installed"
fi
url="https://zoom.us/client/${latestver}/ZoomInstallerIT.pkg"
echo "Latest version of the URL is: $url"
echo "`date`: Download URL: $url" >> ${logfile}
# Compare the two versions, if they are different or Zoom is not present then download and install the new version.
if [ "${currentinstalledver}" != "${latestver}" ]; then
# Construct the plist file for preferences
echo "<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>nogoogle</key>
<string>1</string>
<key>nofacebook</key>
<string>1</string>
<key>ZDisableVideo</key>
<true/>
<key>ZAutoJoinVoip</key>
<true/>
<key>ZDualMonitorOn</key>
<true/>" > /tmp/${plistfile}
if [ "${ssohost}" != "" ]; then
echo "
<key>ZAutoSSOLogin</key>
<true/>
<key>ZSSOHost</key>
<string>$ssohost</string>" >> /tmp/${plistfile}
fi
echo "<key>ZAutoFullScreenWhenViewShare</key>
<true/>
<key>ZAutoFitWhenViewShare</key>
<true/>" >> /tmp/${plistfile}
if [ "${hdvideo}" == "true" ]; then
echo "<key>ZUse720PByDefault</key>
<true/>" >> /tmp/${plistfile}
else
echo "<key>ZUse720PByDefault</key>
<false/>" >> /tmp/${plistfile}
fi
echo "<key>ZRemoteControlAllApp</key>
<true/>
</dict>
</plist>" >> /tmp/${plistfile}
# Download and install new version
/bin/echo "`date`: Current Zoom version: ${currentinstalledver}" >> ${logfile}
/bin/echo "`date`: Available Zoom version: ${latestver}" >> ${logfile}
/bin/echo "`date`: Downloading newer version." >> ${logfile}
/usr/bin/curl -sLo /tmp/${pkgfile} ${url}
/bin/echo "`date`: Installing PKG..." >> ${logfile}
/usr/sbin/installer -allowUntrusted -pkg /tmp/${pkgfile} -target /
/bin/sleep 20
/bin/echo "`date`: Deleting downloaded PKG." >> ${logfile}
/bin/rm /tmp/${pkgfile}
#double check to see if the new version got updated
newlyinstalledver=$(/usr/bin/defaults read /Applications/zoom.us.app/Contents/Info CFBundleVersion)
echo "Version on Mac is ${newlyinstalledver}"
if [ "${latestver}" = "${newlyinstalledver}" ]; then
/bin/echo "`date`: SUCCESS: Zoom has been updated to version ${newlyinstalledver}" >> ${logfile}
echo "Zoom updated successfully"
# /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -title "Zoom Installed" -description "Zoom has been updated." &
else
/bin/echo "`date`: ERROR: Zoom update unsuccessful, version remains at ${currentinstalledver}." >> ${logfile}
/bin/echo "--" >> ${logfile}
echo "Zoom not updated - Installation error"
exit 1
fi
# If Zoom is up to date already, just log it and exit.
else
/bin/echo "`date`: Zoom is already up to date, running ${currentinstalledver}." >> ${logfile}
/bin/echo "--" >> ${logfile}
fi
else
/bin/echo "`date`: ERROR: This script is for Intel Macs only." >> ${logfile}
fi
exit 0
