This is the official release of Munki 5.5, a feature-enhancement and bug-fix release of the Munki tools.
Some of the changes:
-
A new method of finding client certs for mTLS: #1077 (Thanks to @np5)
- This also addresses some issues around client certs some admins reported when upgrading to macOS 11.3 or later.
- This required the addition of asn1crypto to the Python framework
-
Related: a new option for the Munki package build script to include a client cert package: #1091 (Thanks to @rrenstrom)
-
UI change: when there are no optional installs defined, all labels other than Updates are hidden: #1089 (Thanks to @macmule)
-
When the InstallAppleSoftwareUpdates preference is True on Apple silicon:
- Munki will not actually attempt to install any Apple updates on Apple silicon
- Managed Software Center will now display pending Apple updates and direct users to install them using the Software Update pane in System Preferences
- "Encouragement" as described here will happen on Apple silicon for Apple updates as well as "Munki" updates: https://github.com/munki/munki/wiki/aggressive-update-notifications-in-munki-5
-
Bumped the Python version to 3.9.5 (from 3.9.4)
Other minor changes. See v5.4.0...v5.5.0 for a complete list.
This is the same build as the 5.5.0 Beta 2 release -- there have been no changes since that release.
There are two packages attached to this release:
- "munkitools-5.5.0.4362.pkg" is the general-purpose installation package and is suitable for manual installs and for upgrades to existing installs.
- "munkitools_DEP-5.5.0.4362.pkg" is designed for install via MDM as part of Automatic Device Enrollment (formerly known as DEP). (Technical note: this package was built using
make_munki_mpkg.sh -m -B).
You'll need to sign the package before uploading it to your MDM server. See https://github.com/munki/munki/wiki/Signing-Munki for more info on signing a package.