hey gang! Was wondering if anyone had any issues w...
# fleet
b
hey gang! Was wondering if anyone had any issues with running update commands on MacOS 14 devices to get them to MacOS 15. I've got my API gateway automated for the following flow: • Send fleet api command to tell device to check for updates • Send fleet api command to check the status of the command until it returns a result • Send fleet api command to tell device to install the updates returned in the result. Problem is that the command isn't returning any updates for devices on 14.7. It did when there were minor updates to install (Safari and xcode for example) but it doesn't seem to be showing the macOS 15 update. And on the user side, they can see the macOS 15 update available to install, so I'm not sure this is an update deferral issue. Also not sure if this is an Mac issue or a Fleet issue but I figured I'd ask here. Here is the return of the check for updates command:
Copy code
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "<http://www.apple.com/DTDs/PropertyList-1.0.dtd>">
<plist version="1.0">
  <dict>
    <key>AvailableOSUpdates</key>
    <array/>
    <key>CommandUUID</key>
    <string>3d552f97-cdb2-48b5-8ed4-d0d01c374ea4</string>
    <key>Status</key>
    <string>Acknowledged</string>
    <key>UDID</key>
    <string>0AAE9034-DF8A-55B2-A2C0-9BE45DEBEDFC</string>
  </dict>
</plist>
Documentation from Apple that I am referencing: https://developer.apple.com/documentation/devicemanagement/list_the_available_os_updates
r
@Billy H Have you tried using the Fleet UI to enforce OS updates? This would involve setting a minimum version and deadline in your controls. https://fleetdm.com/guides/enforce-os-updates#basic-article:~:text=GitOps%20workflow.-,Fleet%20UI%3A,-Head%20to%20the I will be looking further into the issue you're facing using the API.
b
I was able to figure out that sending the update commands with this specific command documentation does not install full installer upgrades (ie. major operating system upgrades). @Rebecca Cowart the issue I'm running into with the enforce os updates deadline is that users don't seem to care about it and are annoyed that their machines "randomly" shut off at noon on the day the enforcement goes into place. I would love it if Fleet still used Nudge for this, I'm not really sure why it was removed for macOS version 14 and up. Regardless I've been looking at leveraging the erase-install scripts here: https://github.com/grahampugh/erase-install
@Rebecca Cowart so you don't have to dig too much! https://developer.apple.com/documentation/devicemanagement/availableosupdatesresponse In macOS 14 and later,
AvailableOSUpdates
doesn’t include InstallAssistant-based, full-replacement installers. It only contains over-the-air (OTA) updates. OTA updates can update or upgrade the OS and support all
InstallAction
options.
@Rebecca Cowart is there any chance I could ask why Nudge support was dropped for macOS 14 and up? I've been struggling to find any fleet documentation on it
r
@Billy H In terms of your team getting notifications about OS updates in timely ways, I would suggest using the Google Calendar integration tool in Fleet so that a calendar event can be created when an OS update is required on a host. I will consult my team about Nudge and your other questions and return with more information. Thanks!
@Billy H In terms of OS updates, Fleet’s currently recommended workflow is to use the Fleet UI. I understand the desire to find an alternatives, though. In the future, we may end up providing more flexibility surrounding that. Currently, we are focusing on keeping a clean workflow with Apple OS update procedures.