macOS DevOps Configurator

This repository contains scripts and Ansible roles to configure macOS 12.1+ for DevOps usage.

MDM

This repository is tested against machines enrolled in MDM with a configuration profile that allowlists system extensions from the following vendor IDs:

Vendor Name	Team ID	KEXT IDs
VMware	EG7KH642X6	(ALL)
Rogue Amoeba	7266XEXAPM	/Library/Audio/Plug-Ins/HAL/ACE.driver

If these are not allowlisted ahead of running sudo ./runMe.sh, you may have to approve them as prompts come up.
Additionally, on Apple Silicon computers you must enable Reduced Security ahead of running this to allow the Rogue Amoeba apps to install.

Requirements

To configure a machine you must have the following:

1. macOS Sequoia (15.0) or later (This may work on earlier versions, but only the latest is tested)
2. The account you're using must be an Admin
3. Internet access

How To Run

1. Execute sudo ./runMe.sh as the user you will use your Mac with.
   1. You will be prompted for your Mac user password several times in Terminal and via GUI.

TO DOs

Just a few things left to do:

1. ansible role for gems via rbenv

What will be done

When you execute sudo ./runMe.sh the following tasks are performed:

1. Install XCode Command Line Tools
2. Install Homebrew
3. Install Ansible using Homebrew
4. Run the Ansible role mac_setup on the local machine
5. Search for and install any available macOS updates

Third Party Tools

We use a few third party tools to make this work. This is the list of tools used:

1. Ansible (LICENSE: GPLv3)
2. Homebrew (LICENSE: BSD 2-Clause "Simplified" License)

Limitations

1. Due to the requirement for the password to be entered a few times this is not totally unattended

Testing

This project is manually tested in a clean install of macOS in VMware Fusion.

Donate To Support This Project

Route 1337 LLC's open source code heavily relies on donations. If you find this project useful, please consider using the GitHub Sponsors button to show your continued support.

Thank you for your support!