mirror of
https://github.com/mtan93/Installomator.git
synced 2026-03-08 05:31:53 +00:00
309 lines
12 KiB
Bash
Executable File
309 lines
12 KiB
Bash
Executable File
#!/bin/sh
|
||
|
||
# Installomator 1st installation (for Self Service deployment)
|
||
instance="" # Name of used instance
|
||
|
||
LOGO="" # "appstore", "jamf", "mosyleb", "mosylem", "addigy", "microsoft", "ws1"
|
||
|
||
items=(dialog dockutil microsoftautoupdate supportapp applenyfonts applesfpro applesfmono applesfcompact xink zohoworkdrivetruesync textmate 1password7 wwdc theunarchiver keka microsoftedge microsoftteams microsoftonedrive microsoftoffice365)
|
||
# Remember: dialog dockutil
|
||
|
||
installomatorOptions="NOTIFY=all BLOCKING_PROCESS_ACTION=prompt_user"
|
||
|
||
# Error message to user if any occur
|
||
showError="1" # Show error message if 1 (0 if it should not be shown)
|
||
errorMessage="A problem was encountered setting up this Mac. Please contact IT."
|
||
|
||
######################################################################
|
||
# Installomator 1st for Self Service
|
||
#
|
||
# Installation using Installomator
|
||
# No customization below…
|
||
######################################################################
|
||
# This script can be used to install software using Installomator, where the user activate it in Self Service.
|
||
# Script will display a dialog if any errors happens.
|
||
# Progress is shown in notifications to the user
|
||
######################################################################
|
||
# Other installomatorOptions:
|
||
# LOGGING=REQ
|
||
# LOGGING=DEBUG
|
||
# LOGGING=WARN
|
||
# BLOCKING_PROCESS_ACTION=ignore
|
||
# BLOCKING_PROCESS_ACTION=tell_user
|
||
# BLOCKING_PROCESS_ACTION=tell_user_then_quit
|
||
# BLOCKING_PROCESS_ACTION=prompt_user
|
||
# BLOCKING_PROCESS_ACTION=prompt_user_loop
|
||
# BLOCKING_PROCESS_ACTION=prompt_user_then_kill
|
||
# BLOCKING_PROCESS_ACTION=quit
|
||
# BLOCKING_PROCESS_ACTION=kill
|
||
# NOTIFY=all
|
||
# NOTIFY=success
|
||
# NOTIFY=silent
|
||
# IGNORE_APP_STORE_APPS=yes
|
||
# INSTALL=force
|
||
######################################################################
|
||
#
|
||
# This script made by Søren Theilgaard
|
||
# https://github.com/Theile
|
||
# Twitter and MacAdmins Slack: @theilgaard
|
||
#
|
||
# Some functions and code from Installomator:
|
||
# https://github.com/Installomator/Installomator
|
||
#
|
||
######################################################################
|
||
scriptVersion="9.6"
|
||
# v. 9.6 : 2022-11-15 : GitHub API call is first, only try alternative if that fails.
|
||
# v. 9.5 : 2022-09-21 : change of GitHub download
|
||
# v. 9.4 : 2022-09-14 : Making error message optional. downloadURL can fall back on GitHub API.
|
||
# v. 9.3 : 2022-08-29 : installomatorOptions in quotes and ignore blocking processes. Improved installation with looping if it fails, so it can try again. Improved GitHub handling. ws1 support.
|
||
# v. 9.2.2 : 2022-06-17 : installomatorOptions introduced. Check 1.1.1.1 for internet connection.
|
||
# v. 9.2.1 : 2022-05-30 : Some changes to logging
|
||
# v. 9.2 : 2022-05-19 : Built in installer for Installomator, and display dialog if error happens. Now universal script for all supported MDMs based on LOGO variable.
|
||
######################################################################
|
||
|
||
export PATH=/usr/bin:/bin:/usr/sbin:/sbin
|
||
|
||
# Check before running
|
||
case $LOGO in
|
||
addigy|microsoft)
|
||
conditionFile="/var/db/.Installomator1stDone"
|
||
# Addigy and Microsoft Endpoint Manager (Intune) need a check for a touched file
|
||
if [ -e "$conditionFile" ]; then
|
||
echo "$LOGO setup detected"
|
||
echo "$conditionFile exists, so we exit."
|
||
exit 0
|
||
else
|
||
echo "$conditionFile not found, so we continue…"
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
# Mark: Constants, logging and caffeinate
|
||
log_message="$instance: Installomator 1st, v$scriptVersion"
|
||
label="1st-v$scriptVersion"
|
||
|
||
log_location="/private/var/log/Installomator.log"
|
||
printlog(){
|
||
timestamp=$(date +%F\ %T)
|
||
if [[ "$(whoami)" == "root" ]]; then
|
||
echo "$timestamp :: $label : $1" | tee -a $log_location
|
||
else
|
||
echo "$timestamp :: $label : $1"
|
||
fi
|
||
}
|
||
printlog "[LOG-BEGIN] ${log_message}"
|
||
|
||
# Internet check
|
||
if [[ "$(nc -z -v -G 10 1.1.1.1 53 2>&1 | grep -io "succeeded")" != "succeeded" ]]; then
|
||
printlog "ERROR. No internet connection, we cannot continue."
|
||
caffexit 90
|
||
fi
|
||
|
||
# No sleeping
|
||
/usr/bin/caffeinate -d -i -m -u &
|
||
caffeinatepid=$!
|
||
caffexit () {
|
||
kill "$caffeinatepid" || true
|
||
pkill caffeinate || true
|
||
printlog "[LOG-END] Status $1"
|
||
exit $1
|
||
}
|
||
|
||
# Counters
|
||
errorCount=0
|
||
countLabels=${#items[@]}
|
||
printlog "Total installations: $countLabels"
|
||
|
||
# Using LOGO variable to specify MDM and shown logo
|
||
case $LOGO in
|
||
appstore)
|
||
# Apple App Store on Mac
|
||
if [[ $(sw_vers -buildVersion) > "19" ]]; then
|
||
LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"
|
||
else
|
||
LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns"
|
||
fi
|
||
;;
|
||
jamf)
|
||
# Jamf Pro
|
||
LOGO_PATH="/Library/Application Support/JAMF/Jamf.app/Contents/Resources/AppIcon.icns"
|
||
;;
|
||
mosyleb)
|
||
# Mosyle Business
|
||
LOGO_PATH="/Applications/Self-Service.app/Contents/Resources/AppIcon.icns"
|
||
;;
|
||
mosylem)
|
||
# Mosyle Manager (education)
|
||
LOGO_PATH="/Applications/Manager.app/Contents/Resources/AppIcon.icns"
|
||
;;
|
||
addigy)
|
||
# Addigy
|
||
LOGO_PATH="/Library/Addigy/macmanage/MacManage.app/Contents/Resources/atom.icns"
|
||
;;
|
||
microsoft)
|
||
# Microsoft Endpoint Manager (Intune)
|
||
LOGO_PATH="/Library/Intune/Microsoft Intune Agent.app/Contents/Resources/AppIcon.icns"
|
||
;;
|
||
ws1)
|
||
# Workspace ONE (AirWatch)
|
||
LOGO="/Applications/Workspace ONE Intelligent Hub.app/Contents/Resources/AppIcon.icns"
|
||
;;
|
||
esac
|
||
if [[ ! -a "${LOGO_PATH}" ]]; then
|
||
printlog "ERROR in LOGO_PATH '${LOGO_PATH}', setting Mac App Store."
|
||
if [[ $(/usr/bin/sw_vers -buildVersion) > "19" ]]; then
|
||
LOGO_PATH="/System/Applications/App Store.app/Contents/Resources/AppIcon.icns"
|
||
else
|
||
LOGO_PATH="/Applications/App Store.app/Contents/Resources/AppIcon.icns"
|
||
fi
|
||
fi
|
||
printlog "LOGO: $LOGO – LOGO_PATH: $LOGO_PATH"
|
||
|
||
# Mark: Functions
|
||
# Notify the user using AppleScript
|
||
function displayDialog(){
|
||
currentUser="$(stat -f "%Su" /dev/console)"
|
||
currentUserID=$(id -u "$currentUser")
|
||
if [[ "$currentUser" != "" ]]; then
|
||
launchctl asuser $currentUserID sudo -u $currentUser osascript -e "button returned of (display dialog \"$message\" buttons {\"OK\"} default button \"OK\" with icon POSIX file \"$LOGO_PATH\")" || true
|
||
fi
|
||
}
|
||
|
||
# Mark: Code
|
||
name="Installomator"
|
||
printlog "$name check for installation"
|
||
# download URL, version and Expected Team ID
|
||
# Method for GitHub pkg
|
||
gitusername="Installomator"
|
||
gitreponame="Installomator"
|
||
#printlog "$gitusername $gitreponame"
|
||
filetype="pkg"
|
||
downloadURL=$(curl -sfL "https://api.github.com/repos/$gitusername/$gitreponame/releases/latest" | awk -F '"' "/browser_download_url/ && /$filetype\"/ { print \$4; exit }")
|
||
if [[ "$(echo $downloadURL | grep -ioE "https.*.$filetype")" == "" ]]; then
|
||
printlog "GitHub API failed, trying failover."
|
||
#downloadURL="https://github.com$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)"
|
||
downloadURL="https://github.com$(curl -sfL "$(curl -sfL "https://github.com/$gitusername/$gitreponame/releases/latest" | tr '"' "\n" | grep -i "expanded_assets" | head -1)" | tr '"' "\n" | grep -i "^/.*\/releases\/download\/.*\.$filetype" | head -1)"
|
||
fi
|
||
#printlog "$downloadURL"
|
||
appNewVersion=$(curl -sLI "https://github.com/$gitusername/$gitreponame/releases/latest" | grep -i "^location" | tr "/" "\n" | tail -1 | sed 's/[^0-9\.]//g')
|
||
#printlog "$appNewVersion"
|
||
expectedTeamID="JME5BW3F3R"
|
||
|
||
destFile="/usr/local/Installomator/Installomator.sh"
|
||
currentInstalledVersion="$(${destFile} version 2>/dev/null || true)"
|
||
printlog "${destFile} version: $currentInstalledVersion"
|
||
if [[ ! -e "${destFile}" || "$currentInstalledVersion" != "$appNewVersion" ]]; then
|
||
printlog "$name not found or version not latest."
|
||
printlog "${destFile}"
|
||
printlog "Installing version ${appNewVersion} ..."
|
||
# Create temporary working directory
|
||
tmpDir="$(mktemp -d || true)"
|
||
printlog "Created working directory '$tmpDir'"
|
||
# Download the installer package
|
||
printlog "Downloading $name package version $appNewVersion from: $downloadURL"
|
||
installationCount=0
|
||
exitCode=9
|
||
while [[ $installationCount -lt 3 && $exitCode -gt 0 ]]; do
|
||
curlDownload=$(curl -Ls "$downloadURL" -o "$tmpDir/$name.pkg" || true)
|
||
curlDownloadStatus=$(echo $?)
|
||
if [[ $curlDownloadStatus -ne 0 ]]; then
|
||
printlog "error downloading $downloadURL, with status $curlDownloadStatus"
|
||
printlog "${curlDownload}"
|
||
exitCode=1
|
||
else
|
||
printlog "Download $name succes."
|
||
# Verify the download
|
||
teamID=$(spctl -a -vv -t install "$tmpDir/$name.pkg" 2>&1 | awk '/origin=/ {print $NF }' | tr -d '()' || true)
|
||
printlog "Team ID for downloaded package: $teamID"
|
||
# Install the package if Team ID validates
|
||
if [ "$expectedTeamID" = "$teamID" ] || [ "$expectedTeamID" = "" ]; then
|
||
printlog "$name package verified. Installing package '$tmpDir/$name.pkg'."
|
||
pkgInstall=$(installer -verbose -dumplog -pkg "$tmpDir/$name.pkg" -target "/" 2>&1)
|
||
pkgInstallStatus=$(echo $?)
|
||
if [[ $pkgInstallStatus -ne 0 ]]; then
|
||
printlog "ERROR. $name package installation failed."
|
||
printlog "${pkgInstall}"
|
||
exitCode=2
|
||
else
|
||
printlog "Installing $name package succes."
|
||
exitCode=0
|
||
fi
|
||
else
|
||
printlog "ERROR. Package verification failed for $name before package installation could start. Download link may be invalid."
|
||
exitCode=3
|
||
fi
|
||
fi
|
||
((installationCount++))
|
||
printlog "$installationCount time(s), exitCode $exitCode"
|
||
if [[ $installationCount -lt 3 ]]; then
|
||
if [[ $exitCode -gt 0 ]]; then
|
||
printlog "Sleep a bit before trying download and install again. $installationCount time(s)."
|
||
printlog "Remove $(rm -fv "$tmpDir/$name.pkg" || true)"
|
||
sleep 2
|
||
fi
|
||
else
|
||
printlog "Download and install of $name succes."
|
||
fi
|
||
done
|
||
# Remove the temporary working directory
|
||
printlog "Deleting working directory '$tmpDir' and its contents."
|
||
printlog "Remove $(rm -Rfv "${tmpDir}" || true)"
|
||
# Handle installation errors
|
||
if [[ $exitCode != 0 ]]; then
|
||
printlog "ERROR. Installation of $name failed. Aborting."
|
||
caffexit $exitCode
|
||
else
|
||
printlog "$name version $appNewVersion installed!"
|
||
fi
|
||
else
|
||
printlog "$name version $appNewVersion already found. Perfect!"
|
||
fi
|
||
|
||
errorLabels=""
|
||
((countLabels++))
|
||
((countLabels--))
|
||
printlog "$countLabels labels to install"
|
||
|
||
for item in "${items[@]}"; do
|
||
printlog "$item"
|
||
cmdOutput="$( ${destFile} ${item} LOGO=$LOGO ${installomatorOptions} || true )"
|
||
exitStatus="$( echo "${cmdOutput}" | grep --binary-files=text -i "exit" | tail -1 | sed -E 's/.*exit code ([0-9]).*/\1/g' || true )"
|
||
if [[ ${exitStatus} -eq 0 ]] ; then
|
||
printlog "${item} succesfully installed."
|
||
warnOutput="$( echo "${cmdOutput}" | grep --binary-files=text "WARN" || true )"
|
||
printlog "$warnOutput"
|
||
else
|
||
printlog "Error installing ${item}. Exit code ${exitStatus}"
|
||
#printlog "$cmdOutput"
|
||
errorOutput="$( echo "${cmdOutput}" | grep --binary-files=text -i "error" || true )"
|
||
printlog "$errorOutput"
|
||
((errorCount++))
|
||
errorLabels="$errorLabels ${item}"
|
||
fi
|
||
((countLabels--))
|
||
itemName=""
|
||
done
|
||
|
||
# Mark: Finishing
|
||
# Prevent re-run of script if conditionFile is set
|
||
if [[ ! -z "$conditionFile" ]]; then
|
||
printlog "Touching condition file so script will not run again"
|
||
touch "$conditionFile" || true
|
||
printlog "$(ls -al "$conditionFile" || true)"
|
||
fi
|
||
|
||
# Show error to user if any
|
||
printlog "Errors: $errorCount"
|
||
if [[ $errorCount -ne 0 ]]; then
|
||
printlog "ERROR: Display error dialog to user!"
|
||
errorMessage="${errorMessage} Total errors: $errorCount"
|
||
if [[ $showError -eq 1 ]]; then
|
||
message="$errorMessage"
|
||
displayDialog &
|
||
fi
|
||
printlog "errorLabels: $errorLabels"
|
||
fi
|
||
|
||
printlog "Ending"
|
||
caffexit $errorCount
|