MacOS updates installed, 5 mins force reboot

[nategraham]

Hi All,

Our Macs all reboot when a new MacOS patch comes out. We've had JAMF pro for over a year and I don't think this started till 10.14.1. Our users get a pop up saying 'Updates were installed and the system needs to reboot in 5 minutes'. Oddly enough my machine got the pop up and it didn't install the update.

After talking with JAMF support when this happened on 10.14.2 we added restart options to NOT reboot if a user was logged in. That apparently did nothing.

Any other suggestions?

[mattmcchesney]

We are also looking for an answer to this one.

[sportlock]

Ran into this issue with Mojave update that was released this week. Policy in place gives a 240 min delay but users were warned that they were going to have to reboot in only 5 mins.

[sshort]

@nategraham Do these happen to be newer Macs with the T2 chip? There was some chatter in the #mojave MacAdmin Slack about this when 10.14.3 was released. Apparently, if there is an update for BridgeOS on the chip it doesn't play well with restart commands or prompts following an update. Some users may even receive a message to fully shut down their Mac if you run softwareupdate -i -a vs just a restart.

There's a similar bug/quirk in the normal GUI, too. If you have a MBP with Touch Bar (T1 or T2 chip) and click "Download and Update" from System Preferences, the 10.14.3 update downloads, but there is no prompt to reboot. You have to manually click the Install/Update button again in System Preferences, and then the Notification Center alert appears saying an update will restart the Mac with a 60 second countdown.

[nategraham]

According to JAMF support, it's a known bug:
"PI-006540 Deploying a software update policy to a macOS computer reboots the computer even if "Do Not Restart" is selected from the Restart Options pop-up menu."

It's listed here as well: https://www.jamf.com/jamf-nation/my/products/known-issues

[nategraham]

@sshort It's happening to all of our Macs, not just recent ones.

[sportlock]

@sshort Also happening to us with older Macs (pre-T2) as well as new ones.

[jwstyles]

We got that as well... Unfortunately it was at the exact same time as we pushed a corporate wide update policy that rebooted the entire company in the middle of the day...

Jamf support got a blast from us that day.

After all the investigations and back and forth with support they just eventually created the known issue article that you see above and called it a day.

I'd LOVE some update on that if anyone from Jamf is reading this. It's keeping me from executing the update policy I want and forcing all our updates to be manual which is a MASSIVE pain.

[lmeinecke]

Doesn't appear to be fixed in JSS 10.9.0. PI-006540 impacts us as well as we cannot keep our machines on the latest version without manual interaction.

[ricardtolosa]

If you want to put in place a quick fix while this PI is solved, the problem is due to a LaunchDaemon that The JSS is not deleting after the restart.
Go to /Library/LaunchDaemons and delete the jamf reboot plist and that will fix the issue.
If it’s happening on a lot of machines you can create a script that deletes that file if it exists and stick it in a policy :)
Hope this helps!

[B-35405]

I'm having this issue as well at my company

https://www.jamf.com/jamf-nation/discussions/30759/macos-updates-installed-5-mins-force-reboot

[lmeinecke]

@ricardtolosa Could you clarify which plist in /Library/LaunchDaemon ? Looks like there are five of them in there related to JamF.

[oartola]

I have placed a 'softwareupdate' script in Self Service for my end users. We want to create an extension attribute that determines if there are any available software updates so we can create a smart group using that and narrow the scope down to just that group. Any thoughts?

[ricardtolosa]

Hi @lmeinecke ,

The launch daemon name is this one: com.jamfsoftware.task.reboot.plist

Happened on several of our machines and the deletion of this plist + deleting the default reboot payloads from our policies have made the trick.

Let me know if you need any help :)

[nategraham]

And like clockwork, the monthly reboot cycle hit us again. Anyone else?

[nategraham]

Also, at least 2 of my users have rebooted 4 times.

[Kyle821]

Yep, us too. Very frustrating!

[ekrizon]

Is there any update on this....?

[nategraham]

@ekrizon Doesn't seem like it. It's still on their active known issues list.

We've put in a script to defer updates for now. If it happens again I'm gonna get chased by a mob with pitchforks. It's a bummer, because now people are asking 'Is JAMF really worth it?'

[jeremiahjd]

Has there been any movement on this? We are seeing a similar issue, the 5 min reboot pops up, and reboots the mac outside of our reboot window.
We even have the reboot payload set to 60minutes, but it always gives a 5min.
this is not affecting all users, we have about 200 macs but only a couple users seeing this issue.

[Sonic84]

any updated on this problem? we're seeing users complain of "reboots every 5 minutes" now that 10.14.5 update is here.

[aavrii]

Our team is also experiencing this issue, users machines are being rebooted and seeing a 5 minute warning message, even when no reboot payload is configured in a policy. We've configured an explicit "Do not restart" in our policy, but the behaviour remains.

Are there any updates on a resolution for this issue, or workaround?

Thanks!

[ricardtolosa]

Hi @slyall, In order to fix the restart loop you need to delete com.jamfsoftware.task.reboot.plist from /Library/LaunchDaemons. Hope this helps until the issue is fixed :)

[lmeinecke]

@ricardtolosa

My hosts that are impacted by this PI only have:

com.jamfsoftware.jamf.daemon.plist
com.jamfsoftware.startupItem.plist
com.jamfsoftware.task.1.plist

In their /Library/LaunchDaemons directory besides other non-JamF plists. I can't seem to find the one you reference with reboot in the filename.

[jwstyles]

Looks like this issue has finally been solved in 10.14!

https://docs.jamf.com/10.14.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html

"[PI-006540] Fixed an issue that caused a computer to reboot when running Software Update even if "Do Not Restart" is selected from the Restart Options pop-up menu."

[nategraham]

Yeah, we got an email saying it was fixed....

All my users just the 5 minute pop up again on the 10.14.6 supplemental update from yesterday.

[mmcchesney]

Still seeing this issue. I can repeat it on my VM with the latest Apple Update. We need a fix for this ASAP.

[Mcivitillo]

We're seeing this with JPC on 10.15.5, deff not resolved as indicated above.

[rseeley]

Had this issue today. One of the bosses was about to go on a video call and that message popped up.
As a bandaid, I changed the client-side limitations so it cant check between 8am and 4pm. Looking for a fix.

[bwoods]

You all should transition to a "forked" restart. This method utilizes a launch daemon to run the "jamf reboot" command. The use of a launch daemon is necessary so that the machine checks into Jamf after the daemon is loaded. If you simply ran the "jamf reboot" command, an inventory update would not have time to run to completion.

#!/bin/sh
# Create restartcomputer.sh
    echo > /tmp/restartcomputer.sh '#!/bin/bash

#Restart Computer with jamf reboot command
sudo /usr/local/bin/jamf reboot -minutes 1 -background && exit 0'

# Create and load a LaunchDaemon to fork restart

    echo "<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
        <key>Label</key>
        <string>com.company.restart</string>
        <key>UserName</key>
        <string>root</string>
        <key>ProgramArguments</key>
        <array>
            <string>sh</string>
            <string>/tmp/restartcomputer.sh</string>
        </array>
        <key>RunAtLoad</key>
        <true/>
    </dict>
    </plist>" > /tmp/restart.plist

    sudo chown root:wheel /tmp/restart.plist
    sudo chmod 755 /tmp/restart.plist
    sudo launchctl unload /tmp/restart.plist
    sudo launchctl load /tmp/restart.plist

exit 0

Simply change the minute flag in my "jamf reboot" command to customize when you want the machine to restart. Then create a policy with jamf helper message to notify the user before the launch daemon is placed.

[user-xfAKSakyuf]

I have exactly the same problem today. Just in 30 mins I got five pop-up windows "Updates were installed and the system needs to reboot in 5 minutes". If I click OK, my MacBook Pro (Catalina 10.15.7, 2019) will reboot in 5 mins. I have read through all the posts here, seems no solution. BTW, I only have three Jamf files: com.jamf.management.daemon.plist; com.jamfsoftware.jamf.daemon.plistl; and com.jamfsoftware.task.1.plist. Worked with Apple IT team today, no succeed in 40 mins.

[Quillathe]

Any solutions to this?  We're getting hammered at least once a week on all our devices.  Ventura 13.3.1(a) on and with NO pending updates.  Just bloop, there it is interrupting everyone's workday.  It actually doesn't restart the computer either, it will just sit there forever if I don't hit OK.

If we hit ok, it reboots the computer. There is no com.jamfsoftware.task.reboot.plist in my Daemons.

[bwoods]

It looks like one of your ongoing polices has user interaction enabled. That message usually comes from the user interaction restart message. I would take a look at the policy history of the affected machines and turn off that message.

[Quillathe]

Yep!  i found it.  It's a top lvl policy from our central IT office.  Off to make a change request ticket.  Thanks!

[braillle]

I know this is an old thread but wanted let everyone know it seems the issue has returned. Our devices are stuck in an endless reboot loop. 

The only way to resolve the issue was to start the problem computer in targeted disk mode and delete the com.jamfsoftware.task.reboot.plist file from libray/launchdaemons/ folder. Very annoying and frustrating.