Skip to main content
Question

URL for macOS10.12 Sierra-updates?

  • September 13, 2016
  • 41 replies
  • 229 views

Show first post

41 replies

Forum|alt.badge.img+13
  • Honored Contributor
  • February 2, 2017

Just happened to be working on my reposado box today setting up apache rewrites, and can confirm the file changes that were recommended are present. The only URL errors I had were the ones that @macbentosh mentioned and the fix is here.


Forum|alt.badge.img+6
  • Contributor
  • February 2, 2017
?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>CurlPath</key>
        <string>/usr/bin/curl</string>
        <key>LocalCatalogURLBase</key>
        <string></string>
        <key>UpdatesMetadataDir</key>
        <string>/srv/SUS/metadata/</string>
        <key>UpdatesRootDir</key>
        <string>/srv/SUS/html/</string>
        <key>AdditionalCurlOptions</key>
                   <array>
                      <string>ciphers = "rsa_aes_128_sha,rsa_aes_256_sha,rsa_3des_sha"</string>
                   </array>
</dict>
</plist>

Forum|alt.badge.img+5
  • Contributor
  • February 3, 2017

Explain what this does, exactly?


Forum|alt.badge.img+5
  • Contributor
  • February 3, 2017

just realised my netsus server is not resolving dns at all..
not sure how it was able to get previous updates, maybe something in the network has changed


Forum|alt.badge.img+5
  • Contributor
  • February 3, 2017

ok finally got dns up when I run repo sync I get this
/var/lib/reposado$ ./repo_sync
repo_sync run started
279 products found in http://swscan.apple.com/content/catalogs/index.sucatalog
Could not write DownloadStatus.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/DownloadStatus.plist'
Could not write ETags.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ETags.plist'
Could not write ProductInfo.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ProductInfo.plist'
Building index.sucatalog...
Traceback (most recent call last): File "./repo_sync", line 807, in <module> main() File "./repo_sync", line 803, in main download_packages=download_packages) File "./repo_sync", line 772, in sync reposadocommon.writeLocalCatalogs(localcatalogpath) File "/var/lib/reposado/reposadolib/reposadocommon.py", line 474, in writeLocalCatalogs plistlib.writePlist(catalog, localcatalogpath) File "/usr/lib/python2.7/plistlib.py", line 90, in writePlist pathOrFile = open(pathOrFile, "w")
IOError: [Errno 13] Permission denied: '/srv/SUS/html/content/catalogs/index.sucatalog'
shelluser@isp-osb-netsus1:/var/lib/reposado$
any ideas?


Forum|alt.badge.img+3
  • New Contributor
  • February 3, 2017

@scharman what user are you running repo_sync as? And what are the permissions on the files in /srv/SUS/metadata? My bet is that they are owned and only editable by root, but you're running repo_sync without root permissions.

-Matt


Forum|alt.badge.img+5
  • Contributor
  • February 3, 2017

running with sudo worked
I also updated my reposadocommon.py and repo_sync files I found the addition to the file preferences.plist by @macbentosh gave me an error so I removed that.


Forum|alt.badge.img+6
  • Contributor
  • February 3, 2017

Anyone on macadmins slack to chat quicker?

BTW the Change posted by @dan.snelson worked great on 4.0


Forum|alt.badge.img+3
  • New Contributor
  • May 12, 2017

Is there a way to limit it to only Sierra updates?


Forum|alt.badge.img+13
  • Honored Contributor
  • May 12, 2017

to fast


Forum|alt.badge.img+13
  • Honored Contributor
  • May 12, 2017

@damoffett edit your preferences file:

sus01$ cd /usr/local/sbin/reposado/code
sus01 code]$ ls
preferences.plist 
sus01 code]$ more preferences.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>LocalCatalogURLBase</key>
    <string></string>
    <key>UpdatesMetadataDir</key>
    <string>/var/local/reposado/metadata</string>
    <key>UpdatesRootDir</key>
    <string>/var/local/reposado/html</string>
        <key>AppleCatalogURLs</key>
        <array>
       **  <string>http://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>**
        </array>
</dict>
</plist>

hth


Forum|alt.badge.img+3
  • New Contributor
  • May 15, 2017

So just comment out the URL and it will only get Sierra?


Forum|alt.badge.img+13
  • Honored Contributor
  • May 16, 2017

@damoffett Comment out the others and leave only that URL to get only Sierra updates


Forum|alt.badge.img+7
  • Contributor
  • June 28, 2017

Hey guys,

Thanks for the info above, I have managed to get mine working with the repo_sync again. However my config profile that I am deploying to set the SUS is giving me no end of grief. I have mine set to http://x.x.x.x/content/catalogs/index_Production.sucatalog and the client is saying that it cannot load data from the software update server, can anyone see what I am doing wrong with the URL?


Forum|alt.badge.img+7
  • Contributor
  • December 27, 2017

I recently installed netSUS and got it running on centOS 7.

The problem I'm having is that when I add the latest CatalogURL (see below) to the /var/lib/reposado/preferences.plist file, it spits back when I do ./repo_sync that it's trying to 'resolve' each letter of the url. Here's a short snippet:

Could not replicate s: Error 6: Couldn't resolve host 's'
Could not replicate u: Error 6: Couldn't resolve host 'u'
Could not replicate c: Error 6: Couldn't resolve host 'c'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate t: Error 6: Couldn't resolve host 't'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate l: Error 6: Couldn't resolve host 'l'
Could not replicate o: Error 6: Couldn't resolve host 'o'
Could not replicate g: Error 6: Couldn't resolve host 'g'

For some reason, repo_sync isn't reading the line as a single line taht's a url. It's reading each character.

The url I entered in, using vi as the editor (as root) is exactly as shown:

<key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> </array>

We only have Sierra and eventually plan to go to High Sierra using Jamf as it's mgmt tool so I want to control what updates my users get.

Thanks in advance!
S
any ideas?


Forum|alt.badge.img
  • New Contributor
  • August 10, 2018

Been awhile since I looked at this server and I realised after 3 months it hasnt been syncing from Apples server! Last Sync
May 7
Sync Status
Not Running
Disk Usage
422G
Number of Branches
1
I can see recent updates under the branch tho
yet when I do a software update -l from a High Sierra machine I get nothing?
heres my preferences .plist

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CurlPath</key> <string>/usr/bin/curl</string> <key>LocalCatalogURLBase</key> <string></string> <key>UpdatesMetadataDir</key> <string>/srv/SUS/metadata/</string> <key>UpdatesRootDir</key> <string>/srv/SUS/html/</string> <key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>

and when I do a repo_sync:

WARNING: Product 031-87177 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87176 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87175 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87174 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87173 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87172 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog.

My root catalog is 10.13
any ideas