June 2012 - Installer-dev - lists.apple.com

Re: Getting Installation failure error while using Script along with custom requirements.
by Don Montalvo 27 Jun '12

27 Jun '12

Very interesting thread. :) The goal appears to be to produce a PKG or MPKG zero-touch installer for a typical drag-install application (in this example Firefox). The requirements of the PKG or MPKG: 1. Installer needs to check that target Mac meets requirements: http://www.mozilla.org/en-US/firefox/13.0/system-requirements/ Operating Systems • Mac OS X 10.5 • Mac OS X 10.6 • Mac OS X 10.7 Recommended Hardware • Macintosh computer with an Intel x86 processor • 512 MB of RAM • 200 MB hard drive space 2. Find and kill process if it's running (appears to be named "Firefox") 3. Remove the existing /Applications/Firefox.app application. 4. Install the new /Applications/Firefox.app application. At the end of the day, need a zero-touch package (can be double-clicked, or pushed via ARD/Casper/SSH). For continuity the resulting *.pmdoc would be reused when Firefox updates are released so new package can be created. PackageMaker 3.0.4 is being used on a Mac running 10.6, logged in as local admin user. Wanted to jump in to make sure the requirements and goals were clearly outlined, hoping the above could be a simple, easy to document and repeatable process. Seems like there might be some bugs in PackageMaker? :) Thanks, Don vishnu kulkarni <vishnu5876(a)gmail.com> wrote: > Hi Stephane, > > Below details i get from installer log when the script is included with the package. I tried modifying the dist file but to no avail. Any suggestions to get it running? I have been modifying the distribution.dist file using text edit. > > One more question I have is , How to use Actions menu within packagemaker? > > Jun 27 18:06:29 cgmacjss installd[5799]: PackageKit: ----- Begin install ----- > Jun 27 18:06:31 cgmacjss installd[5799]: PackageKit: Install Failed: PKG: pre-flight scripts for "com.wb.firefoxtest.Firefox.pkg"\nError Domain=PKInstallErrorDomain Code=112 UserInfo=0x100118c80 "An error occurred while running scripts from the package “firefox.pkg”." {\n NSFilePath = "./preflight";\n NSLocalizedDescription = "An error occurred while running scripts from the package \U201cfirefox.pkg\U201d.";\n NSURL = "./Contents/Packages/firefox.pkg -- > file://localhost/Users/admin/Documents/Firefox.test5.mpkg/";\n PKInstallPackageIdentifier = "com.wb.firefoxtest.Firefox.pkg";\n} > > > Stephane Sudre <dev.iceberg(a)gmail.com> wrote: > >> vishnu kulkarni <vishnu5876(a)gmail.com> wrote: >> >>> Hi Stephane, >>> >>> Thanks for explanation. But if i include only memory requirement, it does not create any dist file. When I add Disk space requirement and include a preflight script along with the package it fails while installing. If I do not include the script it works fine or vice versa, If i include script and removed disk space requirement it works. I think it's something to do with the dist file. I have pasted just a line from the dist file, I tried changing it though. But i guess you might help me out . >>> >>> options customize="never" allow-external-scripts="no" ( Script fails because of this ? ) Do i need to allow external scripts to run? >>>> rootVolumeOnly="true"/> >>>> <installation-check script="pm_install_check();"/> >>>> <volume-check script="pm_volume_check();"/> >> >> If you're calling an external shell script from the installation- or volume-check scripts, yes you need to allow external scripts. Even if the shell script ends up being embedded in the distribution. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launchd scripts with root access
by David Buxton 27 Jun '12

27 Jun '12

On 27 Jun 2012, at 17:45, Chris Waldrip wrote: > On Jun 27, 2012, at 10:28 AM, Harald Wagener wrote: > >> LaunchAgents run in user context. Move your launchd job to >> /Library/LaunchDaemons to get it run as root. > > > I'd read and understood that /System/Library/Launch* allowed for processes to be run as root, regardless of the user context (hence why OS level processes are started from there), where /Library/Launch* would run based on the user context. But I tested your suggestion, and got my normal errors... No. LaunchAgents run with user permissions. LaunchDaemons run with root permissions. That's why Harald said to move it to /Library/LaunchDaemons. /System/Library/LaunchDaemons is intended for daemons provided by Apple. Third-party launch daemons (like yours) should go in /Library/LaunchDaemons. http://developer.apple.com/library/mac/documentation/MacOSX/Conceptual/BPSy… > The portion of the script that is the upgrade function at the moment... > > #Check spupload version number, and download and install the latest update if it's newer > remoteVersion=$(curl -s http://my.server.com/profiles/version.html) > if [ "$spuploadVersion" -lt "$remoteVersion" ] > then > cd /tmp/ > curl -C - -O http://my.server.com/profiles/latest.zip > unzip -d latest latest.zip > mv -f latest/com.spupload.plist /System/Library/LaunchAgents/ > chmod 644 /System/Library/LaunchAgents/com.cnn.spupload.plist > mv -f latest/spupload.sh /usr/local/sbin/ > launchctl load /System/Library/LaunchAgents/com.cnn.spupload.plist > rm -rf latest* > exit > fi You are opening the system to attack by not using SSL to verify the authenticity of the updates server. Anyone on the network can intercept your request to my.server.com and send it to their own server which then gives your launch daemon a malicious payload to install as root. David B. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launchd scripts with root access
by Rustam Muginov 27 Jun '12

27 Jun '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launchd scripts with root access
by Chris Waldrip 27 Jun '12

27 Jun '12

On Jun 27, 2012, at 10:28 AM, Harald Wagener wrote: > LaunchAgents run in user context. Move your launchd job to > /Library/LaunchDaemons to get it run as root. I'd read and understood that /System/Library/Launch* allowed for processes to be run as root, regardless of the user context (hence why OS level processes are started from there), where /Library/Launch* would run based on the user context. But I tested your suggestion, and got my normal errors... 6/27/12 12:28:10.418 PM com.spupload: override rw-r--r-- root/wheel for /Library/LaunchAgents/com.spupload.plist? (y/n [n]) not overwritten 6/27/12 12:28:10.511 PM com.spupload: override rwxr-xr-x root/wheel for /usr/local/sbin/spupload.sh? (y/n [n]) not overwritten On Jun 27, 2012, at 10:34 AM, Watchman Monitoring wrote: > Seeing the script, or more importantly, how you're calling it, would be helpful. > > Also, how are you validating the contents of what you've downloaded? Right now i'm not too worried about validating, but I intend to do a checksum. I'm just trying to get it installed right now. The portion of the script that is the upgrade function at the moment... #Check spupload version number, and download and install the latest update if it's newer remoteVersion=$(curl -s http://my.server.com/profiles/version.html) if [ "$spuploadVersion" -lt "$remoteVersion" ] then cd /tmp/ curl -C - -O http://my.server.com/profiles/latest.zip unzip -d latest latest.zip mv -f latest/com.spupload.plist /System/Library/LaunchAgents/ chmod 644 /System/Library/LaunchAgents/com.cnn.spupload.plist mv -f latest/spupload.sh /usr/local/sbin/ launchctl load /System/Library/LaunchAgents/com.cnn.spupload.plist rm -rf latest* exit fi Previously the script looked something like this which used installer, and returned similar permission issues since the installer requires root permissions. #Check spupload version number, and download and install the latest update if it's newer remoteVersion=$(curl -s http://my.server.com/profiles/version.html) if [ "$spuploadVersion" -lt "$remoteVersion" ] then cd /tmp/ curl -C - -O http://my.server.com/profiles/latest.zip unzip latest.zip installer -pkg spupload.pkg -tgt /. rm -rf latest* exit fi Here is the plist loaded from /System/Library/LaunchAgent/. It's run every 7 hours, and runs the script in /usr/local/sbin/... <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.spupload</string> <key>Program</key> <string>/usr/local/sbin/spupload.sh</string> <key>ProgramArguments</key> <array> <string>/usr/local/sbin/spupload.sh</string> </array> <key>RunAtLoad</key> <true/> <key>ServiceDescription</key> <string>System Profiler upload tool</string> <key>StartInterval</key> <integer>25200</integer> </dict> </plist> _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

How to use Action menu within packagemaker
by vishnu kulkarni 27 Jun '12

27 Jun '12

Hi, How do I use Action work flow within packagemaker. Action menu does have option to kill the process and quit the process which I want to include in my packages. I do not see OK button activated in the tool when I drag a action . Thanks. Vishnu _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launchd scripts with root access
by Watchman Monitoring 27 Jun '12

27 Jun '12

Seeing the script, or more importantly, how you're calling it, would be helpful. Also, how are you validating the contents of what you've downloaded? -- Sent from a tiny keyboard, please excuse any brevity. Allen Hancock On Jun 27, 2012, at 9:22 AM, Chris Waldrip <cwaldrip(a)me.com> wrote: > We have a script that we want to update automatically. The script checks for a new version when it runs, and it downloads a zip file, expands that, and installs the contents. > > The script is executed from a plist in /System/Library/LaunchAgent/, so it should have root authorization. > > Yet when the script runs and it executes the installer command line tool, the install fails for lack of root permission. > > I modified the script to simply move (mv -f) the specific components to the appropriate locations (/System/Library/LaunchAgent, etc). But the move fails for lack of root permission. > > What am I missing? :-( > > -Chris Waldrip > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/installer-dev/watchman%40watchmanmo… > > This email sent to watchman(a)watchmanmonitoring.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launchd scripts with root access
by Harald Wagener 27 Jun '12

27 Jun '12

LaunchAgents run in user context. Move your launchd job to /Library/LaunchDaemons to get it run as root. On Wed, Jun 27, 2012 at 4:22 PM, Chris Waldrip <cwaldrip(a)me.com> wrote: > We have a script that we want to update automatically. The script checks for a new version when it runs, and it downloads a zip file, expands that, and installs the contents. > > The script is executed from a plist in /System/Library/LaunchAgent/, so it should have root authorization. > > Yet when the script runs and it executes the installer command line tool, the install fails for lack of root permission. > > I modified the script to simply move (mv -f) the specific components to the appropriate locations (/System/Library/LaunchAgent, etc). But the move fails for lack of root permission. > > What am I missing? :-( > > -Chris Waldrip > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/installer-dev/wagener%40gmail.com > > This email sent to wagener(a)gmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Launchd scripts with root access
by Chris Waldrip 27 Jun '12

27 Jun '12

We have a script that we want to update automatically. The script checks for a new version when it runs, and it downloads a zip file, expands that, and installs the contents. The script is executed from a plist in /System/Library/LaunchAgent/, so it should have root authorization. Yet when the script runs and it executes the installer command line tool, the install fails for lack of root permission. I modified the script to simply move (mv -f) the specific components to the appropriate locations (/System/Library/LaunchAgent, etc). But the move fails for lack of root permission. What am I missing? :-( -Chris Waldrip _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Getting Installation failure error while using Script along with custom requirements.
by vishnu kulkarni 27 Jun '12

27 Jun '12

Hi Stephane, Below details i get from installer log when the script is included with the package. I tried modifying the dist file but to no avail. Any suggestions to get it running? I have been modifying the distribution.dist file using text edit. One more question I have is , How to use Actions menu within packagemaker? Jun 27 18:06:29 cgmacjss installd[5799]: PackageKit: ----- Begin install ----- Jun 27 18:06:31 cgmacjss installd[5799]: PackageKit: Install Failed: PKG: pre-flight scripts for "com.wb.firefoxtest.Firefox.pkg"\nError Domain=PKInstallErrorDomain Code=112 UserInfo=0x100118c80 "An error occurred while running scripts from the package “firefox.pkg”." {\n NSFilePath = "./preflight";\n NSLocalizedDescription = "An error occurred while running scripts from the package \U201cfirefox.pkg\U201d.";\n NSURL = "./Contents/Packages/firefox.pkg -- file://localhost/Users/admin/Documents/Firefox.test5.mpkg/";\n PKInstallPackageIdentifier = "com.wb.firefoxtest.Firefox.pkg";\n} On Wed, Jun 27, 2012 at 1:20 AM, Stephane Sudre <dev.iceberg(a)gmail.com> wrote: > On Tue, Jun 26, 2012 at 12:23 PM, vishnu kulkarni <vishnu5876(a)gmail.com> wrote: >> Hi Stephane, >> >> Thanks for explanation. But if i include only memory requirement, it >> does not create any dist file. When I add Disk space requirement and >> include a preflight script along with the package it fails while >> installing. If I do not include the script it works fine or vice >> versa, If i include script and removed disk space requirement it >> works. I think it's something to do with the dist file. I have pasted >> just a line from the dist file, I tried changing it though. But i >> guess you might help me out . >> >> options customize="never" allow-external-scripts="no" ( Script fails >> because of this ? ) Do i need to allow external scripts to run? >>> rootVolumeOnly="true"/> >>> <installation-check script="pm_install_check();"/> >>> <volume-check script="pm_volume_check();"/> > > If you're calling an external shell script from the installation- or > volume-check scripts, yes you need to allow external scripts. Even if > the shell script ends up being embedded in the distribution. -- vishnu -- vishnu _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Installer-dev Digest, Vol 94, Issue 29
by Stephane Sudre 27 Jun '12

27 Jun '12

On Wed, Jun 27, 2012 at 2:44 PM, vishnu kulkarni <vishnu5876(a)gmail.com> wrote: > Hi Stephane, > > > Below details i get from installer log when the script is included > with the package. I tried modifying the dist file but to no avail. Any > suggestions to get it running? > > > Jun 27 18:06:29 cgmacjss installd[5799]: PackageKit: ----- Begin install ----- > Jun 27 18:06:31 cgmacjss installd[5799]: PackageKit: Install Failed: > PKG: pre-flight scripts for "com.wb.firefoxtest.Firefox.pkg"\nError > Domain=PKInstallErrorDomain Code=112 UserInfo=0x100118c80 "An error > occurred while running scripts from the package “firefox.pkg”." {\n > NSFilePath = "./preflight";\n NSLocalizedDescription = "An error > occurred while running scripts from the package > \U201cfirefox.pkg\U201d.";\n NSURL = > "./Contents/Packages/firefox.pkg -- > file://localhost/Users/admin/Documents/Firefox.test5.mpkg/";\n > PKInstallPackageIdentifier = "com.wb.firefoxtest.Firefox.pkg";\n} It looks like your preflight script is failing when run. You can look for more information in the Installer.app log window or installer.log file. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0