munki/munki v6.4.0

Munki 6.4 Official Release

on GitHub

This is the official release of Munki 6.4.0: a feature and bug-fix release of the Munki tools. This is the same build as 6.4.0 Beta 2.

Changes

• 7dd42af - Some tweaks to "Aggressive Notification" behavior. Specifically, in earlier versions of Munki, Managed Software Center could display an "Aggressive Notification", but then if a background/periodic run of Munki happened while the "Aggressive Notification" was displayed, Managed Software Center would switch back into "non-aggressive" mode. This increased the likelihood that a user would not see the aggressive notification.
  In Munki 6.4.0, the "Aggressive Notification" mode is maintained while Munki is doing a background check. If after the check is complete, the Aggressive mode no longer applies, Managed Software Canter will then switch back to "non-aggressive" mode.
  Learn more about "Aggressive Notifications", a feature added in Munki 5, here: https://github.com/munki/munki/wiki/aggressive-update-notifications-in-munki-5
• 4f8ba52 New built-in conditional "facts": board-id (for Intel Macs) and device-id (for Apple silicon Macs)
• 350b92c c3846fd 150418f Experimental support for detecting the hardware support for a given macOS installer. The generated pkginfo will contain an installable_condition_disabled key containing a predicate to test for the detected supported hardware. If you choose to use this, rename the key to installable_condition. The predicate relies on the new support for board-id and device-id in the available conditional "facts", and so requires clients to be running Munki 6.4.0b2 or later.

Fixes

• 35d24d1 - A fix for a display issue when running code/tools/make_munki_mpkg*.sh that looked like this (note the lack of YES/NO after "Include autorun pkg:"):

  Include bootstrap pkg: NO
  Include autorun pkg: 
  Include Rosetta2: NO
  Include config pkg: NO
  Include client cert pkg: NO

A complete list of changes from the 6.3.5 release is here: v6.3.5...v6.4.0

Build info

The GUI apps and the Python framework were built under Xcode 14.3.1 on macOS 13.6.1. Other versions of Xcode have not been tested and may cause different results. (Xcode 15.1 on macOS Sonoma should work; Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

Package versioning

• Distribution package version: 6.4.0.4627
• munki core tools version: 6.4.0.4627
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 6.3.0.4621
• Python package version: 3.10.11.4623

Attachment info

The munkitools-6.4.0.4627.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.