Posted on 04-10-2022 04:55 AM
This is great did some initial testing with S.U.P.E.R.M.A.N | Jamf Pro on a couple of Intel devices one running Big Sur and one with Monterey both are now fully patched thanks to Kevin M White and @HCSTechnology post on it.
https://github.com/Macjutsu/super
has anyone else tried it out yet and what do you think of it?
Posted on 04-11-2022 05:18 AM
Awesome workflow, definitely going to test this out. We can't rely on solutions like nudge to force updates.
Posted on 04-11-2022 11:15 AM
I was going to look at Nudge but S.U.P.E.R.M.A.N seems to work in the testing I’ve done so far.
Posted on 04-11-2022 05:48 AM
But can you man super?
Posted on 04-11-2022 11:28 AM
I would prefer super human!
Posted on 04-11-2022 06:12 AM
Thanks for mentioning this. It looks pretty interesting and comprehensive. I'll be taking a look. Seems there are many custom solutions for the conundrum Apple has put us all in around software updates, but there hasn't been one really surefire way to get these updates installed that I've seen so far. If this actually does it, I'll be pretty psyched.
I like the fact that this uses IBM Notifier for notifications. In case anyone is looking for a really slick messaging tool and hasn't already looked at that, I encourage you to. It's very cool, has a gazillion features, and unlike some other tools that have grown stale, this one has active development on it and modern coding.
Posted on 04-11-2022 11:26 AM
I’m hoping S.U.P.E.R.M.A.N is the right fit for our devices macOS updating is such a pain. I use an MDM script to check and apply updates but hopefully this will be the old way :)
Posted on 04-11-2022 11:47 AM
The script I currently use is;
#!/bin/bash
/usr/libexec/mdmclient AvailableOSUpdates
jss="https://jamf/JSSResource"
username=''
password=''
system_udid=$(system_profiler SPHardwareDataType | awk '/Hardware UUID/ { print $3 }')
system_id=$(curl --silent -u "$username:$password" "$jss/computers/udid/$system_udid" | awk -F "id>" '{print $2;exit;}' | tr -d '</' )
curl -X POST -u "$username:$password" "$jss/computercommands/command/ScheduleOSUpdate/action/install/id/$system_id"
softwareupdate -iaR
Posted on 04-28-2022 04:27 AM
Hello,
In the Jamf policy, what do you choose as a trigger?
Posted on 04-28-2022 04:53 AM
Hi,
Use policy to copy the S.U.P.E.R.M.A.N files to the device and it as a Files & Processes command to setup Users/Shared/super-main/super, which then will trigger it to run on the device.
Posted on 04-28-2022 06:06 AM
Thank you for your reply.
I was talking about the trigger to activate the policy
04-28-2022 06:20 AM - edited 04-28-2022 06:22 AM
Running this command as a Files and Processes will run S.U.P.E.R.M.A.N "/Library/Management/super/super" set the trigger it as Recurring Check-in.
Posted on 04-28-2022 07:13 AM
Ok thanks
Posted on 01-17-2024 11:34 PM
Posted on 01-18-2024 12:37 AM
@rkumar2 the Wiki is the best place for going through how to setup Super :)
Posted on 05-02-2022 09:05 AM
Hi, that's really good to know. Well I have created a policy in Jamf with the SUPERMAN script and a config profile to set the soft, hard and focus deadlines. I have changed the parameters of Testmode=False along with other parameters such as skipsoftwareupdate=False. When I trigger the script, I do get the IBM notification however when I click on restart option from the notification it does not restart. Can you help me with a proper workflow of the script here. Thank you.
Posted on 05-02-2022 12:32 PM
@santy_nextg I could have a look but you might be better to ask the creator of S.U.P.E.R.M.A.N on GitHub.
Posted on 09-22-2022 01:02 AM
@CrawfordRobson wrote:@santy_nextg I could have a look but you might be better to ask the creator of S.U.P.E.R.M.A.N on GitHub.
https://github.com/Macjutsu/superredactle
Thank you.
Posted on 06-11-2022 02:33 PM
Been looking into this but I cant seem to get it to install without forcing a restart on the device even if there is no update.
Also having this issue when applying the API credentials.
This is with
<key>ForceRestart</key> |
<false/> |
enforced by a config profile,
has anyone else had this issue?
Posted on 11-02-2022 04:41 AM
trying this now. I have created and deployed the profile, ( as per jamf images inhttps://github.com/Macjutsu/super/tree/main/Images ) I understand I need to create a separate policy to actually run it, but am not sure where to put the variables, as in, by default there are unlimited deferrals, would like to set to 2 with delays of 1 day max between them. is that part of the command line argument?
Posted on 12-27-2022 09:08 PM
No it's not part of command line. The script does not need to be altered at all, you can set the 'deferral count' to x or 100 and set 'deferral days' to 1 day in the config profile. All settings are in the config profile. Here's what I have:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>JamfProID</key>
<string>$JSSID</string>
<key>DefaultDefer</key>
<string>3600</string>
<key>FocusDefer</key>
<string>300</string>
<key>MenuDefer</key>
<string>3600,7200,86400</string>
<key>RecheckDefer</key>
<string></string>
<key>FocusCount</key>
<string></string>
<key>SoftCount</key>
<string>5</string>
<key>HardCount</key>
<string></string>
<key>FocusDays</key>
<string></string>
<key>SoftDays</key>
<string>3</string>
<key>HardDays</key>
<string></string>
<key>ZeroDay</key>
<string></string>
<key>FocusDate</key>
<string></string>
<key>SoftDate</key>
<string></string>
<key>HardDate</key>
<string></string>
<key>DisplayTimeout</key>
<string>3600</string>
<key>DisplayRedraw</key>
<string>1200</string>
<key>DisplayIcon</key>
<string>/usr/local/peloton/pelo_updates.png</string>
<key>IconSizeIbm</key>
<string>128</string>
<key>IconSizeJamf</key>
<string>128</string>
<key>PreferJamf</key>
<false/>
<key>PolicyTriggers</key>
<string></string>
<key>SkipUpdates</key>
<false/>
<key>ForceRestart</key>
<false/>
<key>TestMode</key>
<false/>
<key>TestModeTimeout</key>
<string>15</string>
<key>VerboseMode</key>
<true/>
</dict>
</plist>
I have one profile for prod, one for zero day, and one for testing, each with different settings to control superman the way I want.
Posted on 12-29-2022 12:10 PM
I would be interested to know what your plist looks like for zero days and how you deploy it. For example, do you block the other policy and push out the zero day one?
Posted on 05-31-2023 05:07 AM
am trying to deploy in the laptops with M1 chip, but its getting failed at the end while installing with an Error: Push workflow for macOS update/upgrade via MDM timed out after 300 seconds, trying again in 3600 seconds.
Posted on 01-17-2024 09:35 PM
@CrawfordRobson can you please share the step by step manual or any PDF ,
i dont now how to start super process in jamf pro
yesterday
A bunch of my devices keep failing with the error message:
Inactive Error: Initial startup validation failed.
How do i remediate this?