FEATURE REQUEST: limiting Apple updates

[munki]

FEATURE REQUEST: limiting Apple updates

[natewalck]

From [email protected] on August 09, 2010 13:12:17

Still cannot change Issue Type and Priority. I recall reading from Google Code FAQ that it is only available for project owners and contributors.

[natewalck]

From [email protected] on August 09, 2010 14:56:35

My preferred solution to this is for admins to run an internal Apple Software Update Server, and just enable those updates you wish to distribute.

Labels: -Type-Defect -Priority-Medium Type-Enhancement Priority-Low

[natewalck]

From [email protected] on August 10, 2010 01:29:56

I am using local Apple Software Update Servers too but I am after limitations-per-client and that functionality is not provided with ASUS.
And there are some updates which really do not get installed automatically, like SMC, EFI or other firmware updates.

Well, I guess have to try to build this myself...

[natewalck]

From [email protected] on May 12, 2011 10:16:33

This functionality could be accomplished with reposado ( http://github.com/wdas/reposado ) by creating a branch catalog for your special clients. Will not add to munki.

Status: WontFix

[natewalck]

From [email protected] on November 30, 2011 06:47:48

It goes a little deeper than howing your own SUS. I have several iMac7,1 in my lab and they all have trouble with especially 10.6.8, so I need to have them at 10.6.7 (because 10.6.7 works with ATi drivers from 10.6.2). https://discussions.apple.com/thread/2384136?start=315&tstart=0 LONGE thread about, but to make a long story short, I don't want 10.6.8 on some machines.

[natewalck]

From [email protected] on November 30, 2011 08:20:00

But I'll look into reposado. I don't know Python (tried to look at the code), but I don't see how it would be so hard to support ignored_apple_updates. But if it becomes a big problem on several machines I guess reposado is the question. For now I have disabled munki for ASUS on that machine.

[natewalck]

From [email protected] on November 30, 2011 08:22:59

reposado can do exactly what you want. You'd create a branch catalog for these iMacs, and not add the 10.6.8 updates to it. You don't even have to replicate the updates; you can use reposado to make custom catalogs only and still have the clients download the actual updates from Apple.

"I don't see how it would be so hard to support ignored_apple_updates"

Then feel free to submit a patch!