URL for macOS10.12 Sierra-updates?

Just happened to be working on my reposado box today setting up apache rewrites, and can confirm the file changes that were recommended are present. The only URL errors I had were the ones that @macbentosh mentioned and the fix is here.

?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>CurlPath</key>
        <string>/usr/bin/curl</string>
        <key>LocalCatalogURLBase</key>
        <string></string>
        <key>UpdatesMetadataDir</key>
        <string>/srv/SUS/metadata/</string>
        <key>UpdatesRootDir</key>
        <string>/srv/SUS/html/</string>
        <key>AdditionalCurlOptions</key>
                   <array>
                      <string>ciphers = "rsa_aes_128_sha,rsa_aes_256_sha,rsa_3des_sha"</string>
                   </array>
</dict>
</plist>

Explain what this does, exactly?

just realised my netsus server is not resolving dns at all..
not sure how it was able to get previous updates, maybe something in the network has changed

ok finally got dns up when I run repo sync I get this
/var/lib/reposado$ ./repo_sync
repo_sync run started
279 products found in http://swscan.apple.com/content/catalogs/index.sucatalog
Could not write DownloadStatus.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/DownloadStatus.plist'
Could not write ETags.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ETags.plist'
Could not write ProductInfo.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ProductInfo.plist'
Building index.sucatalog...
Traceback (most recent call last): File "./repo_sync", line 807, in <module> main() File "./repo_sync", line 803, in main download_packages=download_packages) File "./repo_sync", line 772, in sync reposadocommon.writeLocalCatalogs(localcatalogpath) File "/var/lib/reposado/reposadolib/reposadocommon.py", line 474, in writeLocalCatalogs plistlib.writePlist(catalog, localcatalogpath) File "/usr/lib/python2.7/plistlib.py", line 90, in writePlist pathOrFile = open(pathOrFile, "w")
IOError: [Errno 13] Permission denied: '/srv/SUS/html/content/catalogs/index.sucatalog'
shelluser@isp-osb-netsus1:/var/lib/reposado$
any ideas?

@scharman what user are you running repo_sync as? And what are the permissions on the files in /srv/SUS/metadata? My bet is that they are owned and only editable by root, but you're running repo_sync without root permissions.

-Matt

running with sudo worked
I also updated my reposadocommon.py and repo_sync files I found the addition to the file preferences.plist by @macbentosh gave me an error so I removed that.

Anyone on macadmins slack to chat quicker?

BTW the Change posted by @dan.snelson worked great on 4.0

Is there a way to limit it to only Sierra updates?

to fast

@damoffett edit your preferences file:

sus01$ cd /usr/local/sbin/reposado/code
sus01 code]$ ls
preferences.plist 
sus01 code]$ more preferences.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>LocalCatalogURLBase</key>
    <string></string>
    <key>UpdatesMetadataDir</key>
    <string>/var/local/reposado/metadata</string>
    <key>UpdatesRootDir</key>
    <string>/var/local/reposado/html</string>
        <key>AppleCatalogURLs</key>
        <array>
       **  <string>http://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>**
        </array>
</dict>
</plist>

hth

So just comment out the URL and it will only get Sierra?

@damoffett Comment out the others and leave only that URL to get only Sierra updates

Hey guys,

Thanks for the info above, I have managed to get mine working with the repo_sync again. However my config profile that I am deploying to set the SUS is giving me no end of grief. I have mine set to http://x.x.x.x/content/catalogs/index_Production.sucatalog and the client is saying that it cannot load data from the software update server, can anyone see what I am doing wrong with the URL?

I recently installed netSUS and got it running on centOS 7.

The problem I'm having is that when I add the latest CatalogURL (see below) to the /var/lib/reposado/preferences.plist file, it spits back when I do ./repo_sync that it's trying to 'resolve' each letter of the url. Here's a short snippet:

Could not replicate s: Error 6: Couldn't resolve host 's'
Could not replicate u: Error 6: Couldn't resolve host 'u'
Could not replicate c: Error 6: Couldn't resolve host 'c'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate t: Error 6: Couldn't resolve host 't'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate l: Error 6: Couldn't resolve host 'l'
Could not replicate o: Error 6: Couldn't resolve host 'o'
Could not replicate g: Error 6: Couldn't resolve host 'g'

For some reason, repo_sync isn't reading the line as a single line taht's a url. It's reading each character.

The url I entered in, using vi as the editor (as root) is exactly as shown:

<key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> </array>

We only have Sierra and eventually plan to go to High Sierra using Jamf as it's mgmt tool so I want to control what updates my users get.

Thanks in advance!
S
any ideas?

Been awhile since I looked at this server and I realised after 3 months it hasnt been syncing from Apples server! Last Sync
May 7
Sync Status
Not Running
Disk Usage
422G
Number of Branches
1
I can see recent updates under the branch tho
yet when I do a software update -l from a High Sierra machine I get nothing?
heres my preferences .plist

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CurlPath</key> <string>/usr/bin/curl</string> <key>LocalCatalogURLBase</key> <string></string> <key>UpdatesMetadataDir</key> <string>/srv/SUS/metadata/</string> <key>UpdatesRootDir</key> <string>/srv/SUS/html/</string> <key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>

and when I do a repo_sync:

WARNING: Product 031-87177 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87176 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87175 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87174 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87173 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87172 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog.

My root catalog is 10.13
any ideas