- Jamf Nation Community
- Products
- Jamf Pro
- Custom schema for munki
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Custom schema for munki
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Posted on 02-26-2020 04:27 AM
For everybody using Munki with Jamf here is a schema for it. It borrows heavily form the manifest made by the guys from the ProfileCreator Github.
It only misses references to their Github and version hints
{
"$schema": "http://json-schema.org/schema#",
"title": "Munki",
"description": "Preference Domain: ManagedInstalls",
"type": "object",
"properties": {
"SoftwareRepoURL": {
"type": "string",
"description": "Base URL for Munki repository.",
"options": {
"inputAttributes": {
"placeholder": "http://munki/repo"
}
}
},
"ClientIdentifier": {
"type": "string",
"description": "Identifier for Munki client. Usually is the same as a manifest name on the Munki server. If this is empty or undefined, Munki will attempt the following identifiers, in order: fully-qualified hostname, "short" hostname, serial number and finally, "site_default"."
},
"ManagedInstallDir": {
"type": "string",
"default": "/Library/Managed Installs",
"description": "Folder where Munki keeps its data on the client.",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs"
}
}
},
"LocalOnlyManifest": {
"type": "string",
"description": "Defines the name of your LocalOnlyManifest. Setting this activates the feature. Unsetting it means Munki will remove the file on the next run."
},
"SupressAutoInstall": {
"type": "boolean",
"description": "Munki will not automatically install or remove items."
},
"SupressLoginwindowInstall": {
"type": "boolean",
"description": "Munki will not install items while idle at the loginwindow except for those marked for unattended_install or unattended_uninstall."
},
"InstallAppleSoftwareUpdates": {
"type": "boolean",
"description": "Install updates from an Apple Software Update server, in addition to "regular" Munki updates."
},
"AppleSoftwareUpdatesOnly": {
"type": "boolean",
"description": "Only install updates from an Apple Software Update server. No Munki repository is needed or used."
},
"UnattendedAppleUpdates": {
"type": "boolean",
"description": "Updates that declare no "must-close" applications, or have one or more "must-close" applications, none of which is running, and do not require a logout or restart will be installed as part of a normal periodic background run without notifying the user."
},
"PerformAuthRestarts": {
"type": "boolean",
"description": "Munki will attempt to perform a filevault auth restart."
},
"RecoveryKeyFile": {
"type": "string",
"description": "Absolute path to a plist file containing filevault credentials in key/value format. Used to perform auth restarts."
},
"SupressUserNotifcation": {
"type": "boolean",
"description": "Managed Software Center will never notify the user of available updates."
},
"SupressStopButtonOnInstall": {
"type": "boolean",
"description": "Managed Software Center will hide the stop button while installing or removing software, preventing users from interrupting the install."
},
"InstallRequiresLogout": {
"type": "boolean",
"description": "Managed Software Center will require a logout for all installs or removals."
},
"ShowRemovalDetail": {
"type": "boolean",
"description": "Managed Software Center will display detail for scheduled removals."
},
"ShowOptionalInstallsForHigherOSVersions": {
"type": "boolean",
"description": "Managed Software Center.app will show optional installs and updates that apply to macOS versions higher than the currently installed version."
},
"DaysBetweenNotifications": {
"type": "integer",
"default": 1,
"minimum": 0,
"description": "Number of days between user notifications from Managed Software Center. Set to 0 to have Managed Software Center notify every time a background check runs if there are available updates."
},
"UseNotificationCenterDays": {
"type": "integer",
"default": 3,
"minimum": 0,
"description": "Number of days Notification Center notifications should be used before switching to launching Managed Software Center."
},
"PackageVerificationMode": {
"type": "string",
"description": "Controls how Munki verifies the integrity of downloaded packages. (none = No integrity check is performed, hash = Integrity check is performed if package info contains checksum information, hash_strict = Integrity check is performed, and fails if package info does not contain checksum information.)",
"default": "none",
"enum": [
"none",
"hash",
"hash_strict"
]
},
"FollowHTTPRedirects": {
"type": "string",
"description": "Defines whether Munki will follow all, some or no redirects from the web server. (none = The default behaviour. No redirects are followed. https = Only redirects to URLs using HTTPS are followed. all = Redirects to both HTTP and HTTPS URLs are followed.)",
"default": "none",
"enum": [
"none",
"https",
"all"
]
},
"AdditionalHttpHeaders":{
"type": "array",
"description": "This key provides the ability to specify custom HTTP headers to be sent with all curl() HTTP requests.",
"items": {
"type": "string",
"title": "HTTPHeader",
"options": {
"inputAttributes": {
"placeholder": "HTTPHeader"
}
}
}
},
"IgnoreSystemProxies": {
"type": "boolean",
"description": "HTTP and/or HTTPS proxies set system-wide will be ignored, connections will be made directly."
},
"PackageURL": {
"type": "string",
"description": "Base URL for Munki pkgs. Useful if your packages are served from a different server than your catalogs or manifests.",
"options": {
"inputAttributes": {
"placeholder": "<SoftwareRepoURL>/pkgs"
}
}
},
"CatalogURL": {
"type": "string",
"description": "Base URL for Munki catalogs. Useful if your catalogs are served from a different server than your packages or manifests.",
"options": {
"inputAttributes": {
"placeholder": "<SoftwareRepoURL>/catalogs"
}
}
},
"IconURL": {
"type": "string",
"description": "Base URL for product icons. Useful if your icons are served from a different server or different directory than the default.",
"options": {
"inputAttributes": {
"placeholder": "<SoftwareRepoURL>/icons"
}
}
},
"ClientResourceURL": {
"type": "string",
"description": "Base URL for custom client resources for Managed Software Center. Useful if your resources are served from a different server or different directory than the default.",
"options": {
"inputAttributes": {
"placeholder": "<SoftwareRepoURL>/client_resources"
}
}
},
"ClientResourcesFilename": {
"type": "string",
"description": "Specific filename to use when requesting custom client resources.",
"options": {
"inputAttributes": {
"placeholder": "site_default.zip"
}
}
},
"HelpURL": {
"type": "string",
"description": "URL to open/display when the user selects "Managed Software Center Help" from Managed Software Center's Help menu."
},
"LicenseInfoURL": {
"type": "string",
"description": "URL for Munki to query a webserver to determine if there are available seats for licensed software (or any software you wish to make available via optional_installs, yet control the number of deployed copies).",
"options": {
"inputAttributes": {
"placeholder": "http://sal.example.com/licenses/available/youreallyreallyreallyreallylongkey"
}
}
},
"SoftwareUpdateServerURL": {
"type": "string",
"description": "Catalog URL for Apple Software Updates. If undefined or empty, Munki will use the same catalog that the OS uses."
},
"UseClientCertificate": {
"type": "boolean",
"description": "Use an SSL client certificate when communicating with the Munki server. Requires an https:// URL for the Munki repo."
},
"UseClientCertificateCNAsClientIdentifier": {
"type": "boolean",
"description": "Use the CN of the client certificate as the Client Identifier. Used in combination with the UseClientCertificate key."
},
"ClientCertificatePath": {
"type": "string",
"description": "Absolute path to a client certificate. There are 3 defaults for this key. Concatenated cert/key PEM file accepted.",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs/certs/[munki.pem|client.pem|cert.pem]"
}
}
},
"ClientKeyPath": {
"type": "string",
"description": "Absolute path to a client private key.",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs/certs/[munki.key|client.key|cert.key]"
}
}
},
"ClientRepoCAPath": {
"type": "string",
"description": "Path to the directory that stores your CA certificate(s).",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs/certs"
}
}
},
"SoftwareRepoCACertificate": {
"type": "string",
"description": "Absolute path to your CA Certificate.",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs/certs/ca.pem"
}
}
},
"LogFile": {
"type": "string",
"default": "/Library/Managed Installs/Logs/ManagedSoftwareUpdate.log",
"description": "Primary log is written to this file. Other logs are written into the same directory as this file.",
"options": {
"inputAttributes": {
"placeholder": "/Library/Managed Installs/Logs/ManagedSoftwareUpdate.log"
}
}
},
"LogToSyslog": {
"type": "boolean",
"description": "Log to syslog in addition to ManagedSoftwareUpdate.log."
},
"LoggingLevel": {
"type": "integer",
"default": 1,
"minimum": 0,
"maximum": 4,
"description": "Higher values cause more detail to be written to the primary log."
},
"MSULogEnabled": {
"type": "boolean",
"description": "Log user actions in the GUI."
},
"MSUDebugLogEnabled": {
"type": "boolean",
"description": "Debug logging for Managed Software Center."
},
"AccessKey": {
"type": "string",
"description": "Munki has a feature which enables Mac administrators to use middleware to change munki's HTTP request. S3-Auth uses this feature to create the HTTP headers necessary to authenticate to S3.",
"options": {
"inputAttributes": {
"placeholder": "AKIAIX2QPWZ7EXAMPLE"
}
}
},
"Region": {
"type": "string",
"description": "Munki has a feature which enables Mac administrators to use middleware to change munki's HTTP request. S3-Auth uses this feature to create the HTTP headers necessary to authenticate to S3.",
"options": {
"inputAttributes": {
"placeholder": "ex us-west-2"
}
}
},
"SecretKey": {
"type": "string",
"description": "Munki has a feature which enables Mac administrators to use middleware to change munki's HTTP request. S3-Auth uses this feature to create the HTTP headers necessary to authenticate to S3.",
"options": {
"inputAttributes": {
"placeholder": "z5MFJCcEyYBmh2BxbrlZBWNJ4izEXAMPLE"
}
}
}
},
"required":[
"SoftwareRepoURL"
]
}
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Posted on 02-26-2020 07:52 AM
Nice work.
You may want to post about this on this other thread, that seemed to start the main discussion on custom application schemas. @mscottblake created a central github location where all custom schema repos can be linked out to. He can send you an invite to join the group to post yours there if you'd like.
