-
Notifications
You must be signed in to change notification settings - Fork 0
Install Non System Items
In addition to installing macOS updates and upgrades, super can also install non-system items. In fact, super automatically installs available non-system Apple software updates during a restart validation workflow that runs immediately after the system restarts from a macOS update or upgrade.
Alternatively, super can be configured to install non-system items without restarting or to run Jamf Pro Policies as either part of a macOS update workflow or as a standalone workflow. Also keep in mind, there are additional alternate workflow options that can further adjust the super workflow behavior.
If there is no pending restart-required macOS update or upgrade, have super attempt to install non-system Apple software updates as soon as they become available.
Command option example:
--install-non-system-updates-without-restarting
Command option disable example:
--install-non-system-updates-without-restarting-off
Configuration profile example:
<key>InstallNonSystemUpdatesWithoutRestarting</key>
<true/>
Due to limitations in the macOS softwareupdate command, attempting to simultaneously install non-system Apple software updates (like Safari or Xcode Command Line Tools) at the same time as a macOS update or upgrade is unreliable. As such, the default super workflow prioritizes macOS updates and upgrades by installing them first. Then immediately after restarting from a macOS update or upgrade, the super restart validation workflow installs any available non-system Apple software updates.
Enabling the --install-non-system-updates-without-restarting option allows super to install any non-system Apple software updates that become available between macOS releases. If there is no active user when this workflow runs then non-system Apple software updates are immediately downloaded and installed. However, if there is an active user, then an update dialog is presented to the user. The non-system Apple software update dialog is similar to the the standard macOS update or upgrade dialog except that the user is prompted to simply "Install" rather than "Restart".
Have super run one or more Jamf Pro Policy Triggers that are comma separated with no spaces.
Command option example:
--install-jamf-policy-triggers=Trigger1,Trigger2,Trigger3
Command option disable example:
--install-jamf-policy-triggers=X
Configuration profile example:
<key>InstallJamfPolicyTriggers</key>
<string>Trigger1,Trigger2,Trigger3</string>
With this option enabled the super workflow runs the Jamf Pro Policy Triggers immediately before the restart for a macOS update or upgrade. As a default super workflow behavior, Jamf Pro Policies only run if the system also needs to restart for Apple software updates.
Alternately, this option can be used along with the --install-jamf-policy-triggers-without-restarting option so even when there are no macOS updates available you can still take advantage of dialogs, notifications, schedules, deferrals, and deadlines provided by super.
When deploying super using the command line, if any Policy Trigger names contains any special characters or spaces then you should surround the text with single ' quotes. However, when deploying super using a Jamf Pro Policy with Script Parameters do not use single quotes.
If there is no pending restart-required macOS update or upgrade, make sure super still runs Jamf Pro Policy Triggers.
Command option example:
--install-jamf-policy-triggers-without-restarting
Command option disable example:
--install-jamf-policy-triggers-without-restarting-off
Configuration profile example:
<key>InstallJamfPolicyTriggersWithoutRestarting</key>
<true/>
Obviously, this option requires that you also specify the Jamf Pro Policies to run via the --install-jamf-policy-triggers option. In addition, this option can be combined with the --workflow-disable-update-check to prevent the super workflow from checking for Apple software updates, and thus only run the specified Jamf Pro Policies.
The super workflow does not automatically restart the computer when this option is enabled. This is by design as it's assumed that, if required, one of the specified Jamf Pro Policies is going to restart the computer.
Therefore, if you want super to only run your Jamf Pro Policies and to also force a restart then you must specify both the --install-jamf-policy-triggers-without-restarting and --workflow-restart-without-updates options along with your Jamf Pro Policy Triggers.