HELP!!! High School Teacher Trying To Figure Out Lab Deployment On Own

[ehsmaclab]

I am hoping for some guidance. I am a high school digital media teacher and by default am also my own NetTech. My second year of teaching (about 9 years ago) we got our first Mac lab and an Xserve. The school didn't have funds to pay for enterprise support so I had to figure out how to setup the Xserve (ODM, NetBoot, Network Homes, etc.). I had no clue how to do this and must have reformatted the Xserve at least a half dozen times until I figured it out. Anyhow, over the years I have managed to figure out how to:

 

 

• Create Gold Master image
  
• Use NetBoot
  
• Use DeployStudio
  
• Create student network home accounts using Passenger
  
• Use Workgroup Manager to customize settings
  

 

We got new iMacs two years ago and now everything I used to know how to do . . . isn't the right way to do it. So, I REALLY need some people to point me in the right direction (YouTube, blogs, etc.). Here is what I need help on:

 

 

1. Apple says I need to ditch WGM and network homes in favor of local accounts or mobile accounts and profile manager. I upgraded the Xserve to Lion. It is the highest it will go. The iMacs are all current. How do I do this? Is there a way to still import students using passenger without WGM?
   
2. How do I build an image that is thin/modular?
   


1. I need to also install: Adobe CC 2015, Cinema 4D, Unity 3D, AutoDesk Maya and Sketchbook Pro, DaVinci Resolve, Garageband, iWork, Google Drive, VLC, etc. I'd prefer to do the "new" method of clean image plus packages, but not quite sure what I am doing.
   

 

[*]Setup printer

[*]Create two local accounts (in addition to individual accounts authenticated by the server).

[Carter]

1.Apple says I need to ditch WGM and network homes in favor of local accounts or mobile accounts and profile manager. I upgraded the Xserve to Lion. It is the highest it will go. The iMacs are all current. How do I do this? Is there a way to still import students using passenger without WGM?

This is correct. Apple has been trying to push out WGM for a number of years now with the replacement being Profile Manger. There was a lot of backlash on this from users that Apple re introduced WGM for the new OS's. Yosemite OS X 10.10 is the first OS that does not have access to WGM. If you are running anything older you can grab it here https://support.apple.com/en-ca/HT201651

As for users this is up to you. We run a AD Active Directory system at our college so I've had the macs logging in for years via AD. We've never used OD/WGM users here, AD works great. If you are running Lion you can still use WGM with new iMacs running Yosemite. I've been running an old WGM server for a the past few years that was always older than the client machines. I've only moved to PM (Profile Manager) this year because I wanted everything to be up to date for the OS's on Client and Servers.

Sadly one of the biggest issues with PM is that unlike WGM you can not back/import users, groups etc. This to me is one of the biggest down falls/failures of PM that I’ve submitted bug reports on. Apple has yet to fix this.

 

 

2. How do I build an image that is thin/modular?

Basically there are two ways. Build your image as thin as possible and then use Munki https://github.com/munki to push out packages, software, updates etc. Munich can install or uninstall software as you need.

The other option is to build your full image ahead of time, image it up then push it out.

I use a bit of both. I have multiple images but I try to keep them as thin as I can but have them customized for each lab. We have close to 10 labs but I have 3 main images. One image would have the full suite of Adobe CC as that would be too big & a massive install to push over the network. Other images would not have Adobe at all. After imaging with DeployStudio I have Munki deploy extra software, updates, etc. that each computer/lab needs.

 

 

3. Setup Printers

You can still push this out via WGM or PM. Which ever setup you have running.

 

 

4. Create local accounts

I would build these into your base image so they are already in place. The other option is to have DeployStudio create new accounts but you will need to create/update the scripts in DS.

If you need a hand creating a base image with a default user profile I have an article here which also includes a script which if you use, please use the latest links.

http://www.edugeek.net/forums/mac/72443-how-create-os-x-default-profile-template-bind-ad-10-5-10-8-a-3.html

[ehsmaclab]

I am trying Munki now on a test machine. I am going through the process of building the repo packages. Any tips on getting the newest versions of Garageband, iBooks Author and iWork as deployable packages? I stumbled across this: DeployWiz: Deploying iLife '13 and iWork '13. Is that still the only method?

 

Also, it seems Cinema 4D can't be deployed from the downloadable installer. You have to repackage after it is installed. I have never doing that. Is it pretty easy?

 

Here is my current list of apps I plan to install with asterisks next to the ones I already created Munki packages for (whether or not Munki actually works . . . well I have gotten that far in the process, yet).

 

*Pro Video Formats

Adobe CC

C4D

*DaVinci Resolve

Unity 3D

*Maya

*Smoke

*Evernote

*VLC

*Google Drive

*Chrome

Garageband & iMovie

iWork

iBook Author

*Sketchbook

*Burn

*The Unarchiver

*Text Wrangler

[Carter]

For apps that you cannot just drag and drop into the Munki GUI you just need to use the terminal. So when I have new versions of Pages, Keynote, Garageband etc. I would run the updates and have them all installed on the server then I'd run munki import.

 

If you haven't run it yet you will need to run

/usr/local/munki/munkiimport --configure

 

The next step is to import the application you want to import. For example is you want FireFox it would look like this:

[color=#333333][font=Consolas]/usr/local/munki/munkiimport [/font][/color][color=#A71D5D][font=Consolas]~[/font][/color][color=#333333][font=Consolas]/Downloads/Firefox[/font][/color][color=#333333][font=Consolas]\ [/font][/color][color=#333333][font=Consolas]33.0.2.dmg[/font][/color]

 

You can see the instructions here https://github.com/munki/munki/wiki/munkiimport

[ehsmaclab]

I have figured out how to import dmg files and pkgs. The problem with the App Store stuff is that it just downloads and installs automatically into the Applications folder. No dmg file or pkg. Unless I am missing something.

 

Also, I did a test run using the munki demonstration setup guideline. Worked great on my test machine, but it was host and client. In my lab I have two Xserves. One is the web server that hosts my class websites and student websites. The other is for Open Directory, NetBoot, and DeployStudio. I assume I install Munki server on the Web server?

[Carter]

I have figured out how to import dmg files and pkgs. The problem with the App Store stuff is that it just downloads and installs automatically into the Applications folder. No dmg file or pkg. Unless I am missing something.

You would follow the same instructions using the terminal utility. The difference is that instead of pointing it to a .dmg or package you point it to the application. For example if you were importing "Pages" you would use:

 

/usr/local/munki/munkiimport /Applications/Pages.app

 

 

Also, I did a test run using the munki demonstration setup guideline. Worked great on my test machine, but it was host and client. In my lab I have two Xserves. One is the web server that hosts my class websites and student websites. The other is for Open Directory, NetBoot, and DeployStudio. I assume I install Munki server on the Web server?

Correct, you will need the server App installed for Munki so you can use whatever server you have that already has Server App installed.

[ehsmaclab]

This may seem like a dumb question, but how do I get munkitools to install the apps/pkgs as part of an automated workflow?

 

For the past 7-8 years I have been building a monolithic image. One machine setup exactly as I wanted and I used NetBoot and DeployStudio to image the lab (36 iMacs and 2 MacPros) overnight. I'd come back in the morning all of the computers would be imaged, bound to OD, named, and booted to the login screen. Granted the fits couple of years had some hiccups, but things have been running smoothly for several years.

 

Obviously I am now trying to wrap my head around this new modular/thin image method. From reading a lot of blogs this is the workflow I have so far (let me know if I am screwing up somewhere):

 

AutoDMG to create a base image

CreateUserPKG to create local user accounts

Create install packages with Munki on a test machine

Deploy Image (DeployStudio and Netboot), run user pkgs, name machines, bind to OD, install profile manager profile, ???

 

Then how do I get the apps to install automatically using munki?

 

After everything is imaged I download student roster from our SiS, convert to CSV, import into Passenger, export users, import users into WGM. Apple suggested that I move away from network accounts, so I am going to try mobil user. Cross my fingers that everything works.

 

On a side note, having a heck of a time getting Maya and Sketchbook Pro to install. Not sure how to get munch to add serial numbers after install. Haven't tried Adobe CC, yet. Just built the package.

[Whymac]

On a side note, having a heck of a time getting Maya and Sketchbook Pro to install. Not sure how to get munch to add serial numbers after install. Haven't tried Adobe CC, yet. Just built the package.

 

 

This is the page I used for importing adobe cc. It's a little time consuming at first, but it works great once you get it. You have to build two packages for each adobe product you want to install.

 

https://github.com/munki/munki/wiki/Munki%20And%20Adobe%20CC

 

As far as your workflow. I create a master in deploy studio from a machine that already has munki installed and configured. Then restore that image to other macs.

 

There's a bootstrap munki script you can add to your workflow that automatically starts munki updates on each client.. Have completely figured that one out yet, but its supposed to install all the apps set by the munki manifest to install on each client before the first boot.

Edited August 13, 2015 by Whymac

[Carter]

This may seem like a dumb question, but how do I get munkitools to install the apps/pkgs as part of an automated workflow?

Munki Import is just the tool thaat imports the application, isntall, .dmg etc. into Munki. The MunkiAdmin program which has a GUI interface would be used to setup what gets deployed into your labs and set areas.

 

For the past 7-8 years I have been building a monolithic image. One machine setup exactly as I wanted and I used NetBoot and DeployStudio to image the lab (36 iMacs and 2 MacPros) overnight. I'd come back in the morning all of the computers would be imaged, bound to OD, named, and booted to the login screen. Granted the fits couple of years had some hiccups, but things have been running smoothly for several years.

You are doing this right! This is still how I image my labs. I have three main images that have been fully customized the way I want then I deploy them to the lab. Munki handles the install of extra software and settings that one lab may need over another. So instead of me making 10 images for our campus I have 3 and then each lab get minor adjustments made either from ProfileManager & Munki.

 

Obviously I am now trying to wrap my head around this new modular/thin image method. From reading a lot of blogs this is the workflow I have so far (let me know if I am screwing up somewhere):

I've seen people do this but I rather build my image to the full specs I want then push out the image and have PM & Munki make adjustments for me to install extra software and modify settings. I'm sure many go with a thin image and then install every bit of software they need but I prefer to have more control of what I have on the image.

 

AutoDMG to create a base image

CreateUserPKG to create local user accounts

Create install packages with Munki on a test machine

Deploy Image (DeployStudio and Netboot), run user pkgs, name machines, bind to OD, install profile manager profile, ???

This is where I have no experience. I've never bothered to use AutoDMG as I build my own image from scratch & as for users, I just have the one Administrator with the root user enabled and then all other users logon via Active Directory credentials.

 

Then how do I get the apps to install automatically using munki?

This is hard to explain. This is where it took some testing and reading over the munki documentation to figure it out. In short you need to have the scripts/munkitools installed on the client so that they know where to look to checkin with munbki. I have these scripts and tools installed after DeployStudio has imaged a computer. They get added based on the lab I'm imaging.

 

After everything is imaged I download student roster from our SiS, convert to CSV, import into Passenger, export users, import users into WGM. Apple suggested that I move away from network accounts, so I am going to try mobil user. Cross my fingers that everything works.

 

On a side note, having a heck of a time getting Maya and Sketchbook Pro to install. Not sure how to get munch to add serial numbers after install. Haven't tried Adobe CC, yet. Just built the package.

[ehsmaclab]

Carter I just I post on Twisted Mac about updating the GPU on the XSERVE and this will allow you to run OS X 10.10? That might be worth it for a $100. I keep coming across so many guides for everything, but most reference newer versions of OS X Server.

[Carter]

There are lots of guides out there for sure!

[TomCollins]

If it's the XServe 2006 version, I believe the actual issue holding you back is the fact it is a 64 bit CPU however uses a 32 bit EFI/Firmware. There are bootloaders out there, however, that can change the original 32 bit EFI to 64 bit (here's one example), allowing you to use Yosemite

 

Thanks!

[ehsmaclab]

I am so close I can taste it. My test machine is having an issue binding to OD during the first boot process. I keep getting an error " An error occurred while trying to get IP addresses, new attempt in 10 seconds..."

 

My DNS for the server looks good. I did nslookup and the domain and IP are resolving. I think it might be in the computer configuration setup in DS. I have a computer group created called "maclab". I usually have DS name and configure the network for each computer. Our IP range for the lab is: 10.74.55.10-10.74.55.54. I wasn't quite sure what IP Address Scope is. I put: 10.74.55.0. Anyhow, it just keeps restarting and not binding. Any ideas?

 

I am not sure if it is a 2006 version. I don't think so. I think we purchased them in 07 or 08. I'll have to look it up on EveryMac.

[ehsmaclab]

I am SOOOOO close. I had to not have DS set the network settings. Instead I had to setup DHCP on my Xserve. Only took six hours to figure that out. SMH. Anyhow, everything works (rename computer, restore image, bind to OD, install munkitools) except the client installing the software from the muni_repo. Munki flashes and then nothing. Something must be wrong with my script that is supposed to point the client to the repo.

[Carter]

How are things going? Get what you need up and running?

[ehsmaclab]

After way more glitches than I had expected, I finally had success. Our district DHCP server wasn't configured right and I have no access to it. I spent 9 hours one day trying to figure out why NetBoot wasn't working when I had been doing for 7 years. Not to mention it worked on older model iMacs, not just the main lab model. Very frustrating. I had to setup DHCP on the Xserve. I also got Munki running this year, which is nice.

 

I also got your default home profile script working. That works great. Much easier than trying to set through WGM or PM.

 

I might try to upgrade the Xserve with a new GPU so that I can run 10.10, but then I lose the functionality of being able to import students from a CSV . . .

[Jwzg]

I am trying Munki now on a test machine. I am going through the process of building the repo packages. Any tips on getting the newest versions of Garageband, iBooks Author and iWork as deployable packages? I stumbled across this: DeployWiz: Deploying iLife '13 and iWork '13. Is that still the only method?

 

Also, it seems Cinema 4D can't be deployed from the downloadable installer. You have to repackage after it is installed. I have never doing that. Is it pretty easy?

 

Here is my current list of apps I plan to install with asterisks next to the ones I already created Munki packages for (whether or not Munki actually works . . . well I have gotten that far in the process, yet).

 

*Pro Video Formats

Adobe CC

C4D

*DaVinci Resolve

Unity 3D

*Maya

*Smoke

*Evernote

*VLC

*Google Drive

*Chrome

Garageband & iMovie

iWork

iBook Author

*Sketchbook

*Burn

*The Unarchiver

*Text Wrangler

 

Try Autopkgr. Install it on a second server and tie the repo to your management tool (Munki, Casper, etc.). It will automatically pick up newer versions of packages when it runs and create policies to automatically deploy them to machines in the device scope. Imagine never having to touch a machine for Flash updates!

Edited September 4, 2015 by Jwzg