Apple Training Series Mac OS X Deployment v10.5 Kevin M White Apple Training Series: Mac OS X Deployment v10.5 Kevin M White Published by Peachpit Press For information on Peachpit Press books, contact: Peachpit Press 1249 Eighth Street Berkeley, CA 94710 510/524-2178 510/524-2221 (fax) Find us on the Web at: www.peachpit.com To report errors, please send a note to errata@peachpit.com Peachpit Press is a division of Pearson Education Copyright © 2009 by Apple Inc and Peachpit Press Project Editor: Rebecca Freed Editor: Judy Ziajka Production Editor: Danielle Foster Copyeditor: Darren Meiss Tech Editors: John Signa, Joel Rennich Proofreader: Patricia Pane Compositor: Danielle Foster Indexer: Rebecca Plunkett Cover design: Mimi Heft Notice of Rights All rights reserved No part of this book may be reproduced or transmitted in any form by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher For information on getting permission for reprints and excerpts, contact permissions@peachpit.com Notice of Liability The information in this book is distributed on an “As Is” basis without warranty While every precaution has been taken in the preparation of the book, neither the author nor Peachpit shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained in this book or by the computer software and hardware products described in it Trademarks Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks Where those designations appear in this book, and Peachpit was aware of a trademark claim, the designations appear as requested by the owner of the trademark All other product names and services identified throughout this book are used in editorial fashion only and for the benefit of such companies with no intention of infringement of the trademark No such use, or the use of any trade name, is intended to convey endorsement or other affiliation with this book ISBN 13: 978-0-321-50268-1 ISBN 10: 0-321-50268-X 987654321 Printed and bound in the United States of America This book is dedicated to my best friend and lovely wife, Michelle This page intentionally left blank Acknowledgments In addition to the amazing staff at Apple and Peachpit who were instrumental in completing this work, I would also like to thank Schoun Regan, LeRoy Dennison, John Signa, Steve Brokaw, Jason Trenary, Simon Wheatley, John DeTroye, Joel Rennich, Josh Wisenbaker, Arek Dreyer, Chase Kelly, and David Seebaldt Finally, I could not have made this journey without the support of my friends and family v This page intentionally left blank Contents at a Glance Chapter Chapter Chapter Chapter Chapter Chapter Chapter Chapter Appendix Getting Started xiii Deployment Planning Deploying Individual Items and Containers 23 Deploying with Installation Packages 79 Deploying Entire Systems 141 Using NetBoot for Deployment 191 Postimaging Deployment Considerations 243 System Maintenance 279 Complete Deployment Solutions 317 Third-Party Tools 337 Index 341 vii This page intentionally left blank Table of Contents Getting Started xiii Chapter Deployment Planning Using the Deployment Planning Template Deployment Concepts Planning Hardware Logistics Planning Usage Management 13 What You’ve Learned 19 References 19 Review Quiz 20 Chapter Deploying Individual Items and Containers 23 Mac OS X File Considerations Archiving for Deployment Using Apple Remote Desktop to Deploy Items Using Disk Images for Deployment Using Advanced Disk Image Deployment Features What You’ve Learned References Review Quiz Chapter 24 29 38 51 66 74 74 75 Deploying with Installation Packages 79 Understanding Mac OS X Installation Technology 80 Creating Installation Packages 85 Using Installation Package Actions, Scripting, and Snapshots 107 Deploying and Maintaining Installation Packages 119 ix 346  Index disk images (continued) encrypted, 54 format types supported by Mac OS X, 52–53 hdiutil formats used for, 63 making from Mac OS X installation media, 167 modifying, 62–66 mounting, 59–62 resizing with hdiutil command, 65–66 segmented, 72–73 setting Finder preferences for, 60–61 volume types for, 51–52 Disk Utility about, 55 creating deployable disk images with, 55–58 encryption offered in, 54 repairing permissions for installation packages, 133–134 scanning cloned system images with, 162, 163 splitting single partitions with, 148 using ASR locally from, 178–180 diskless booting mode about NetBoot, 198–199, 210–211 configuring, 210–211 diskutil command See Disk Utility disposing of old computers, 12–13 DNS server name, 266 downloading Apple System Imaging and Software Update Administration guide, 142, 192 Apple updates, 144, 187 Deployment Planning Template, 2, 328–329 Downloads window (Safari), 71–72 drag-and-drop deployment deploying single items with ARD, 45–47 pros and cons of, 27–28 dscl command, 255 dsconfigad command, 254 dsconfigldap command, 254–255 duplication methods for volumes, 177 DVD/CD master images, 53 Dynamic Host Configuration Protocol See DHCP E Easy Install option (Mac OS X v10.5), 167 educational deployment case studies higher education deployment, 326–328 one-to-one deployment in high school, 320–322 EFI (Extensible Firmware Interface) technology, 259 Eggplant, 331 Enable Automated Installation action, 235 enabling disk images for Internet with hdiutil, 70–72 Remote Management service, 38–44, 252 encrypted disk images, 54 equal to (==) operand, 106 erasing volumes, 177 error messages, 73 Extensible Firmware Interface (EFI) technology, 259 extracting ZIP archives, 33–37 F file attributes, 24–25 file containers See containers File System Events service, 116–117 files AppleSetupDone, 149–150, 161 archive.bom, 84 archive.pax.gz, 84, 122 creating launchd daemon, 261–262 disk images vs archive, 54–55 extracting ZIP archive, 33–37 info.plist, 84, 109 installation choices, 126, 167–169, 173, 174 Index  347 modifying client’s property list, 256 mpkg, 81, 83, 98 NetBoot system image, 196 pkg, 80, 83, 98 pmdoc, 85 removing model system’s user- and computer-specific, 160–161 resource forks, 25 server setup passphrase, 266 setting system permissions for, 17 shadow, 198–199, 210–211 using Mac OS Extended file system, 24–26, 74 FileVault home folders, 54 FileWave Suite, 238, 239 Filter Clients by MAC Address action, 230–231 Filter Computer Models action, 231 filtering configuring general and DHCP, 215, 216–217 images with actions, 230–231 per-image, 216, 217–218 per-image hardware address, 216 types of, 215–216 Finder creating ZIP archive using, 29–31 extracting ZIP archives using, 33–35 identifying flat installation packages in, 83 installation package display in, 80–81 mounting disk images with, 59–61 setting disk image preferences for, 60–61 using drag-and-drop deployment from, 46–47 FireWire cable, 148 firmware differences in PowerPC and Intel Mac, 259–260 Firmware Password Utility, 260 Knowledge Base documents on, 239 NetBoot requirements for, 194 postimaging tasks for client, 244 setting password in NetInstall, 235–236, 260 updating, 260 Firmware Password Utility, 260 flat installation packages See also installation packages about, 83 building flat installation metapackages, 98 converting installation packages to, 123 expanding, 120 removing receipts from, 134 Flat Package Editor application, 83, 84–85 folders finding deployment root, 94 managing user’s home, 16–17 NetBoot system image, 196 organizing modular system materials in, 166 removing model system’s computerspecific, 161 removing Public and Sites from hidden administrator’s home, 157 Resources and Packages, 84–85 storing custom scripts in /Library/Scripts, 262 system settings stored in /Library/ Preferences, 256 G General preferences pane (Safari), 70–71 Get Application action, 109, 110 GPTFormat partition format, 172 graphic for disk image, 66–69 greater than (>), 106, 122 greater than or equal to (>=), 106 H hardware, 5–13 asset tracking for, 281 checking installation requirements for, 105 cloned system image requirements for, 148 computer disposal and recycling, 12–13 concepts in hardware logistics, 348  Index hardware (continued) cooling computers, dealing with installation of, 10–11 modular system image requirements for, 166 needed to restore local system images, 178 NetBoot requirements, 194–195 planning network infrastructure, power infrastructure required for, 5–7 security planning for, 8–10, 20 usage policies for peripherals, 14 hdiutil command building and mounting sparse disk image with, 171, 172 converting existing disk image, 63–64 creating disk images, 58–59 disk image format types commonly used, 63 enabling disk images for Internet, 70–72 mounting disk images with, 61–62 resizing existing disk image with, 65–66 setting up segmented disk images with, 72–73 hidden administrator’s account, 155–158 higher education deployment case study, 326–328 home folders disk image protection of FileVault, 54 FireVault, 54 managing for user, 16–17 removing Public and Sites from hidden administrator, 157 host names automatic generation of, 251 navigating directory services with unknown, 255 HTTP file sharing using, 180, 181 sharing NetBoot disk images with client via, 197 unaffected by stopping NetBoot, 215 hybrid disk images, 53 I i386 folder, 196 Iceberg, 136 icons Automator, 224 blinking globe, 219–220 disk image volume, 59 Disk Utility, 56 indicating system restart requirements, 128 Server Admin, 209 System Image Utility, 200 image scan process, about, 162–163 index values for NetBoot images, 208 individual item deployment See deploying individual items and containers info.plist file, 84, 109 inspecting installation packages, 119–123 expanding flat installation packages, 120 extracting items from installation payloads, 122–123 inspecting installation scripts, 123 listing bill of materials, 121–122 reasons for, 119–120 InstaDMG, 169, 173, 186, 187, 285 installation choices files creating, 167–169 defining custom installation choices with, 126 implementing, 173, 174 installation metapackages See also installation packages building flat, 98 compatibility and, 83 contents of, 84–85 creating, 94–99 installation packages vs., 81–82 installation packages, 79–139 See also BOM; inspecting installation packages; PackageMaker; payloads adding new components to existing, 95–99 ARD for deploying, 124, 127–131 Index  349 automating workflows with installation actions, 107–111 configuration, 170 contents of, 84–85 converting to flat installation packages, 123 creating, 85–94 customizing interface for, 99–103 defined, 80–81 deploying, 123–131 flat, 83 hosted on server for manual installation, 124 icon indicating required system restart, 128 inspecting, 119–123 installation metapackages vs., 81–82 Knowledge Base documents on, 137 localizing interface, 100 Mac OS X technology for, 80–85 managing software additions for, 283 methods for, 124 other uses for, 107 overview, 137 payload-free, 115–116 preparing for modular system images, 165, 166–170 preparing items for payload, 86 Read Me and License files in, 101 repairing and replacing installed items in, 133–135 review quiz, 138–139 scripts for, 111–115 snapshot, 116–119 specifying installation requirements for, 103–107 SSH for deploying, 124, 125–127 testing custom, 94, 99 third-party tools for, 124, 135–136, 337 tracking with receipts, 131–132 troubles installing on non-system volumes, 169 using custom introduction text, 101 verifying ARD deployment of, 130–131 web resources for, 137 InstallEase, 136 Installer as option for installation packages, 81 viewing custom installation interface with, 99 installer command function of installation choices files with, 167 installing Mac OS X on modular image volume, 172–173 option for installation packages, 81 performing SSH installation package deployment with, 125 unable to view custom installation interface with, 99 using sudo to add items in system domains, 127 Internet-ready disk images, 70–72 introduction text for installation packages, 101 ioreg command, 257 IP address configuration, 266 items See also deploying individual items and containers ARD for multiple item deployment, 47–51 deploying, 4, 23–24, 74 extracting items from payload, 122–123 preparing for payload, 86 repackaging third-party items for modular system images, 169 repairing and replacing in installation packages, 133–135 web resources for deploying, 75 K K2 suite, 310–311 KDC (Kerberos Key Distribution Center), 253 kickstart command, 40, 252 Kill Application action, 110 Knowledge Base documents firmware password protection, 260 individual item and container deployment, 74–75 installation packages, 137 NetBoot and firmware issues, 238–239 350  Index Knowledge Base documents (continued) planning, 19–20 postimaging deployment, 275–276 system maintenance, 313 troubleshooting system deployment, 187 L LANDesk Suite, 238, 239, 312 LANrev Suite, 238, 239, 312 launchd daemon, 261–262, 263, 274, 297 LDAP (Lightweight Directory Access Protocol) accessing MCX settings on, 19 binding clients to, 253, 254–255 information needed to implement automatic server setup, 270 less than (