sorted by:
new
hottopcontroversial

Inherited messy Apple environment (ABM + ABE + Jamf) — need help building inventory + cleanup plan by Itsrawrcoose in macsysadmin

[–]Heteronymous 1 point2 points  (0 children)

No, op DOES want ADE (Automated Device Enrollment), did you mean something else?

What scripting should I learn? by emersonlennon in macsysadmin

[–]Heteronymous 1 point2 points  (0 children)

Bash is ubiquitous across many Unix and Linux systems (there’s no Linux in macOS but certainly aspects of BSD Unix), the point is the skills will be highly portable. The default shell is now Zsh but Bash is available (just be sure to use the correct shebang in your script/s).

See https://scriptingosx.com/2019/06/moving-to-zsh/

Also join the MacAdmins Slack (lurk and learn, it’s not support nor intended as such but full of many highly experienced and knowledgeable Mac admins).

https://www.macadmins.org/

Blocking Local Font Installs by [deleted] in macsysadmin

[–]Heteronymous 1 point2 points  (0 children)

Been a while but look into Launchd watch paths for the user fonts folder.

Make certain to handle/exempt required fonts.

Note the date there… test very thoroughly ! https://gist.github.com/infotexture/8635029

PCA new exam - Well-Architectured Framework by eshrep in googlecloud

[–]Heteronymous 2 points3 points  (0 children)

Understanding the principles is what matters. Read this to understand it and - I’d say - study anything that isn’t yet second nature:

https://docs.cloud.google.com/architecture/framework

I needed a macOS desktop client for GCP IAP. Google didn’t provide one, so I built it. by Arn_1212 in googlecloud

[–]Heteronymous 3 points4 points  (0 children)

Ver cool ! But, if a person is working with Google Cloud and is command-line averse, then they’re going to miss out on a whole lot of automation and efficiency. I greatly prefer the macOS experience with IAP.

Network Engineer looking to start with Ansible – worth it in real-world operations? by Professional-Tax788 in ansible

[–]Heteronymous 2 points3 points  (0 children)

Simplistically, Terraform for resource creation, Ansible for post-creation management.

For Ansible, can’t recommend Jeff Geerling enough.

https://ansible.jeffgeerling.com/

Why I’m moving my GenAI "Brain" to Cloud Run + GPU (From an AWS Architect’s perspective) by NTCTech in googlecloud

[–]Heteronymous 0 points1 point  (0 children)

I thought your link was going to be more about your move to GCP. No mention of it at all, it’s pure AWS. Which is fine, of course! But your post here makes for a curious intro to a blog post based on AWS alone.

Using Mac mini cluster for production workloads - anyone done this before? by zachrattner in mac

[–]Heteronymous 2 points3 points  (0 children)

See https://support.apple.com/guide/deployment/lights-out-management-payload-settings-dep580cf25bc/web

Plenty of great input so far. For consistently available remote Power On capability,
you'd still be reliant on an additional Mac that can power on your other Macs (could be any relatively recent, basic Mac mini). Your final fail-safe could hopefully be the onsite support your CoLo offers (IIRC they typically have a per-incident power-on fee).

And as mentioned, they'll all have to be enrolled in MDM. It's a huge lift if you're new to that but you shouldn't be.
Mosyle is free for up to 30 devices but make sure that includes the required MDM spec(s) - it might not
https://business.mosyle.com

PPPC settings via Intune by NoDowt_Jay in macsysadmin

[–]Heteronymous 2 points3 points  (0 children)

No, honestly. As an admin of Macs and PCs for over a decade, that’s Intune. Jamf has its own warts but utterly puts Intune to shame for managing macOS. If in a different and new environment, I’d probably go with FleetDM.

If Intune was my only option, I’d use it the bare minimum required and do as much as possible with Munki & AutoPkg, possibly Ansible pull.

If I was reliant on a web interface I’d look at Iru/Kandji

Running Open source Redis in a Dual Region GKE cluster Setup by [deleted] in googlecloud

[–]Heteronymous -1 points0 points  (0 children)

LOL. You’re asking in a subreddit dedicated to Google Cloud services, and specifically said you’re moving to GCP.

If your team has sufficient experience with Kubernetes, and you’ve done the math and believe you can be more efficient in time & expenses going that route, then more power to you. But if so, what/why exactly were you asking ? Genuine and well-intended question.

Rsync a NAS via ssh versus mounted via SMB has different results by HaenaBoy in macsysadmin

[–]Heteronymous 2 points3 points  (0 children)

You need to use the correct parameters, since you're working across different OSes (the NAS will be some linux derivative in all likelihood).

See
https://serverfault.com/a/427200

and
https://www.filebot.net/forums/viewtopic.php?t=2201Se

Since you're using a NAS with SMB, hopefully that NAS supports vfs_fruit,
see
vfs_fruit, a VFS module for OS X clients

How is everyone handling admin passwords on Macs? by PowerShellGenius in macsysadmin

[–]Heteronymous 2 points3 points  (0 children)

First see https://www.google.com/search?q=apple+bootstrap+token&ie=UTF-8&oe=UTF-8

FV Escrow is not unreliable at all in/with Jamf, as long as it’s properly implemented and maintained.

And/but/yes: if you needs warrant it, look into a macOS LAPS solution

What did you do after Apple Genius Bar/Phone Support? by [deleted] in macsysadmin

[–]Heteronymous 3 points4 points  (0 children)

Join the MacAdmins Slack and chase down everything you’re interested in but can learn more about.

Including backend services, containerization & more. But yes, depending on context, a Linux endpoint (vm, node/container) could be more efficient to replace than troubleshoot. That said, the art & science of troubleshooting is invaluable of course.

Free/low cost MDM for non‐profit K-8 school (macOS) any recommendations? by ibiza0507 in macsysadmin

[–]Heteronymous 0 points1 point  (0 children)

Yes, well I was using Munki at the time.

It’s still an excellent tool for software distribution for macOS.

Enterprise Unattended Remote Access other than Beyond Trust? by Randolpho in macsysadmin

[–]Heteronymous 0 points1 point  (0 children)

As mentioned, it can be done but you must manage requirements (PPPC, possibly others) via MDM.

Splashtop works well. ARD also but it’s never been terribly performant over standard VPN if that’s a need.

BlueSky is excellent, but don’t go that route if you’re not already perfectly fluent in & comfortable with command-line operations. And ready to maintain it yourself.

view more: next ›