Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. If you like what you see, join us in person at the ninth annual Jamf Nation User Conference (JNUC) this October for three days of learning, laughter and IT love.

URL for macOS10.12 Sierra-updates?

I know it is still a week to the release for macOS 10.12, but is the URL for macOS 10.12 available yet?
or will there be an update for NetSUS to support 10.12?

Like Comment
Order by:
SOLVED Posted: by gmarnin

https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

Like
SOLVED Posted: by roiegat

If you're using the developer beta also add this one:

https://swscan.apple.com/content/catalogs/others/index-10.12seed-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

Like
SOLVED Posted: by LeidenUniv

@gmarnin and @roiegat: thanks for the url's!

I'm wondering: do we have to change reposada (the underlying-technique for NetSUS) and add the url's ourselves or will there be an updated NetSUS (4.1.1/4.2.0) including the Sierra-URL's?

Like
SOLVED Posted: by roiegat

So for my Netsus's I've done a little hack. In my reposado preference file I have this listed:

https://swscan.apple.com/content/catalogs/others/index-10.12seed-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

This catalog will support Sierra Beta, El Cap, and Yosemite just fine.

But in order to make it work with Casper a little nicer I create symbolic link from the catalog to index.catalog. This is all done at /srv/SUS/html. I used the following command:
sudo ln -s index-10.12seed-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalogindex.sucatalog

The nice thing is now I can tell casper to have the computer go to the softwareupdate server and get updates. Otherwise I'd have to script it to point to the current catalog name and it gets long and confusing.

Like
SOLVED Posted: by LeidenUniv

nice!
Yesterday I added the link to the Sierra catalog. (Net)SUS works fine now for my Sierra test-Macs.
However, it would be nice if the Appliance will be updated (or some kind of update-script) before Sierra is released. But I will not complain until the 20th

Like
SOLVED Posted: by AdamH

I'm struggling with getting my NetSUS to work with Sierra as well....but.... just to keep things current, the URL for the GM version is:

https://swscan.apple.com/content/catalogs/others/index-10.12customerseed-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog.gz

Like
SOLVED Posted: by brennanma

I'm running NetSUS 4.1.0. I can't figure out where / how to add Sierra to it. When I look at /var/lib/reposado/preferences.plist it does not reference any current versions (it's only about 10 lines). Can anyone point me in the right direction?

Like
SOLVED Posted: by AdamH

Is there any word on NetSUS being updated to support Sierra?
10.12.1 update has been released and is not showing up in my NeSUS.

Like
SOLVED Posted: by dan-snelson

The following seems to be working for us:

more /var/lib/reposado/preferences.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>CurlPath</key>
    <string>/usr/bin/curl</string>
    <key>LocalCatalogURLBase</key>
    <string></string>
    <key>UpdatesMetadataDir</key>
    <string>/srv/SUS/metadata/</string>
    <key>UpdatesRootDir</key>
    <string>/srv/SUS/html/</string>
    <key>AppleCatalogURLs</key>
            <array>
                    <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>
            </array>
</dict>
</plist>
Like
SOLVED Posted: by AdamH

That did the trick! Thanks a bunch!

Like
SOLVED Posted: by Dalmatian

@gmarnin, @roiegat Hi guys

Dose netsus still work for you? i found that it didn't update the list since 10.12.2 released. Any solutions here?

Like
SOLVED Posted: by gmarnin

I don't use netsus, I use reposado.

Like
SOLVED Posted: by AdamH

My NetSUS is still getting updates, but its not adding any deprecated updates to the sucatalog.
Not finding any solutions yet.

Like
SOLVED Posted: by gmarnin

The solution is to use reposado without the overhead of netsus

Like
SOLVED Posted: by AdamH

Not everyone has the resources and knowledgebase to effectively use Reposado.

Like
SOLVED Posted: by brennanma

Edit /var/lib/reposado/reposadolib/reposadocommon.py

At the end of line 90, add a comma
After line 90, add:
('https://swscan.apple.com/content/catalogs/others/'
'index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard'
'.merged-1.sucatalog')

Run your sync. This seems to be working for us.

-Matt

Like
SOLVED Posted: by scharman

not working for me, just updated my servers to 4.1.0 and updated the preferences file and even the one above, still only showing:
[ ] index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog 2017-02-02 11:26 2.3M [ ] index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog 2017-02-02 11:26 4.2M [ ] index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog 2017-02-02 11:26 4.4M [ ] index-leopard-snowleopard.merged-1.sucatalog 2017-02-02 11:26 1.7M [ ] index-leopard.merged-1.sucatalog 2017-02-02 11:26 896K [ ] index-lion-snowleopard-leopard.merged-1.sucatalog 2017-02-02 11:26 2.7M [ ] index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog 2017-02-02 11:26 2.4M [ ] index.sucatalog 2017-02-02 11:26 902K shall I wait a day or so?

Like
SOLVED Posted: by brennanma

@scharman , did you run a sync through the UI after making those edits?

The preferences file didn't work for me, but editing the reposadocommon.py did.

Like
SOLVED Posted: by macbentosh

@brennanma did the same change and no luck on my 4.1.0 box

Like
SOLVED Posted: by macbentosh

Anyone on macadmins slack to chat quicker?

BTW the Change posted by @dan.snelson worked great on 4.0

Like
SOLVED Posted: by brennanma

Going back through my bash_history, it looks like I also manually ran /var/appliance/sus_sync.py as root. Perhaps it's a permission issue that the user apache is running the sync as doesn't have permission to create the new files, but running the script as root allowed them to be created? That doesn't entirely make sense though, since then it wouldn't be able to update them.

@macbentosh , I am not familiar with the Slack chat room you're referring to.

Like
SOLVED Posted: by macbentosh

@brennanma it is the Macadmins slack. so slack.com or macadmins.slack.com or something

Like
SOLVED Posted: by macbentosh

Could not replicate https://swscan.apple.com/content/catalogs/others/index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog: Error 59: Unknown cipher in list: HIGH
Could not replicate https://swscan.apple.com/content/catalogs/others/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog: Error 59: Unknown cipher in list: HIGH
Could not replicate https://swscan.apple.com/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog: Error 59: Unknown cipher in list: HIGH
Could not replicate https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog: Error 59: Unknown cipher in list: HIGH

Like
SOLVED Posted: by macbentosh

FIXED IT!! https://groups.google.com/forum/#!msg/reposado/_fUl1n3uPq8/dobauIM0CAAJ

Like
SOLVED Posted: by dan-snelson

@macbentosh Thanks for updating us on the fix.

Mind sharing your entire .plist?

Like
SOLVED Posted: by Nix4Life

Just happened to be working on my reposado box today setting up apache rewrites, and can confirm the file changes that were recommended are present. The only URL errors I had were the ones that @macbentosh mentioned and the fix is here.

Like
SOLVED Posted: by macbentosh
?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>CurlPath</key>
        <string>/usr/bin/curl</string>
        <key>LocalCatalogURLBase</key>
        <string></string>
        <key>UpdatesMetadataDir</key>
        <string>/srv/SUS/metadata/</string>
        <key>UpdatesRootDir</key>
        <string>/srv/SUS/html/</string>
        <key>AdditionalCurlOptions</key>
                   <array>
                      <string>ciphers = "rsa_aes_128_sha,rsa_aes_256_sha,rsa_3des_sha"</string>
                   </array>
</dict>
</plist>
Like
SOLVED Posted: by scharman

Explain what this does, exactly?

Like
SOLVED Posted: by scharman

just realised my netsus server is not resolving dns at all..
not sure how it was able to get previous updates, maybe something in the network has changed

Like
SOLVED Posted: by scharman

ok finally got dns up when I run repo sync I get this
/var/lib/reposado$ ./repo_sync
repo_sync run started
279 products found in http://swscan.apple.com/content/catalogs/index.sucatalog
Could not write DownloadStatus.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/DownloadStatus.plist'
Could not write ETags.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ETags.plist'
Could not write ProductInfo.plist because [Errno 13] Permission denied: '/srv/SUS/metadata/ProductInfo.plist'
Building index.sucatalog...
Traceback (most recent call last): File "./repo_sync", line 807, in <module> main() File "./repo_sync", line 803, in main download_packages=download_packages) File "./repo_sync", line 772, in sync reposadocommon.writeLocalCatalogs(localcatalogpath) File "/var/lib/reposado/reposadolib/reposadocommon.py", line 474, in writeLocalCatalogs plistlib.writePlist(catalog, localcatalogpath) File "/usr/lib/python2.7/plistlib.py", line 90, in writePlist pathOrFile = open(pathOrFile, "w")
IOError: [Errno 13] Permission denied: '/srv/SUS/html/content/catalogs/index.sucatalog'
shelluser@isp-osb-netsus1:/var/lib/reposado$
any ideas?

Like
SOLVED Posted: by brennanma

@scharman what user are you running repo_sync as? And what are the permissions on the files in /srv/SUS/metadata? My bet is that they are owned and only editable by root, but you're running repo_sync without root permissions.

-Matt

Like
SOLVED Posted: by scharman

running with sudo worked
I also updated my reposadocommon.py and repo_sync files I found the addition to the file preferences.plist by @macbentosh gave me an error so I removed that.

Like
SOLVED Posted: by macbentosh

Anyone on macadmins slack to chat quicker?

BTW the Change posted by @dan.snelson worked great on 4.0

Like
SOLVED Posted: by damoffett

Is there a way to limit it to only Sierra updates?

Like
SOLVED Posted: by Nix4Life

to fast

Like
SOLVED Posted: by Nix4Life

@damoffett edit your preferences file:

sus01$ cd /usr/local/sbin/reposado/code
sus01 code]$ ls
preferences.plist 
sus01 code]$ more preferences.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>LocalCatalogURLBase</key>
    <string></string>
    <key>UpdatesMetadataDir</key>
    <string>/var/local/reposado/metadata</string>
    <key>UpdatesRootDir</key>
    <string>/var/local/reposado/html</string>
        <key>AppleCatalogURLs</key>
        <array>
       **  <string>http://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>**
        </array>
</dict>
</plist>

hth

Like
SOLVED Posted: by damoffett

So just comment out the URL and it will only get Sierra?

Like
SOLVED Posted: by Nix4Life

@damoffett Comment out the others and leave only that URL to get only Sierra updates

Like
SOLVED Posted: by Treger

Hey guys,

Thanks for the info above, I have managed to get mine working with the repo_sync again. However my config profile that I am deploying to set the SUS is giving me no end of grief. I have mine set to http://x.x.x.x/content/catalogs/index_Production.sucatalog and the client is saying that it cannot load data from the software update server, can anyone see what I am doing wrong with the URL?

Like
SOLVED Posted: by slundy

I recently installed netSUS and got it running on centOS 7.

The problem I'm having is that when I add the latest CatalogURL (see below) to the /var/lib/reposado/preferences.plist file, it spits back when I do ./repo_sync that it's trying to 'resolve' each letter of the url. Here's a short snippet:

Could not replicate s: Error 6: Couldn't resolve host 's'
Could not replicate u: Error 6: Couldn't resolve host 'u'
Could not replicate c: Error 6: Couldn't resolve host 'c'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate t: Error 6: Couldn't resolve host 't'
Could not replicate a: Error 6: Couldn't resolve host 'a'
Could not replicate l: Error 6: Couldn't resolve host 'l'
Could not replicate o: Error 6: Couldn't resolve host 'o'
Could not replicate g: Error 6: Couldn't resolve host 'g'

For some reason, repo_sync isn't reading the line as a single line taht's a url. It's reading each character.

The url I entered in, using vi as the editor (as root) is exactly as shown:

<key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> </array>

We only have Sierra and eventually plan to go to High Sierra using Jamf as it's mgmt tool so I want to control what updates my users get.

Thanks in advance!
S
any ideas?

Like
SOLVED Posted: by scharman2

Been awhile since I looked at this server and I realised after 3 months it hasnt been syncing from Apples server! Last Sync
May 7
Sync Status
Not Running
Disk Usage
422G
Number of Branches
1
I can see recent updates under the branch tho
yet when I do a software update -l from a High Sierra machine I get nothing?
heres my preferences .plist

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CurlPath</key> <string>/usr/bin/curl</string> <key>LocalCatalogURLBase</key> <string></string> <key>UpdatesMetadataDir</key> <string>/srv/SUS/metadata/</string> <key>UpdatesRootDir</key> <string>/srv/SUS/html/</string> <key>AppleCatalogURLs</key> <array> <string>https://swscan.apple.com/content/catalogs/others/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string> <string>https://swscan.apple.com/content/catalogs/others/index-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog</string>

and when I do a repo_sync:

WARNING: Product 031-87177 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87176 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87175 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87174 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87173 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog. WARNING: Product 031-87172 not added to branch 10.13 of index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. It is not in the corresponding Apple catalog.

My root catalog is 10.13
any ideas

Like