Re:MacOS monitoring the open source way
by kripy on Thursday April 26, 2018 @07:58PM
(#16937193)
Interesting that osquery is developed by Facebook and Santa is developed by Google. I do some work with Facebook and during a video conference with one of their employees the connection dropped out. When we reconnected I asked what happened and they said that the machine updated itself. I thought this was kind of an odd time to update and dropped it into the conversation and was told that their laptops are updated every day. Without an understanding of the inner workings of Facebook it seems like they may be snapshotting employee machines, daily.
[ Parent
| on HN ]
Re:MacOS monitoring the open source way
by antoncohen on Thursday April 26, 2018 @08:59PM
(#16937543)
I doubt it was snapshotting. It is common to force OS updates. For macOS there are tools where the employee will be prompted to update, and can dismiss for a while, but eventually they will be forced to restart. My guess is that the Facebook employee had ignored update prompts and was then forced to update. Every day does seem odd, I can't think of an update type that would require restarts/logoff every day. At least a couple years ago Facebook and Dropbox were managing their Macs in similar ways, with similar tools, I'd be surprised if they changed to something that required daily restarts.
Re:MacOS monitoring the open source way
by antoncohen on Friday April 27, 2018 @12:00AM
(#16938373)
Facebook has a Chef cookbook called cpe_nightly_reboot for their Macs. I can't think of why that would be required, but they must have a reason.
https://github.com/facebook/IT-CPE/tree/master/chef/cookbook...
I don't work at Facebook, but I'm fairly certain this is for things like build servers, not client machines.
They use Munki for software updates, which, just like you describe, gives the user a grace period where they can reboot at their leisure. Ignore it for long enough and it'll crank up the nagging, and eventually force a reboot.
Re:MacOS monitoring the open source way
by icebraining on Friday April 27, 2018 @09:38AM
(#16940661)
this is for things like build servers, not client machines.
It talks about killing GUI processes. Is it common to run a display server on macOS servers?
Yes. Services that can run without a display are better run on a Linux server anyway.
Re:MacOS monitoring the open source way
by icebraining on Friday April 27, 2018 @11:30AM
(#16941512)
I assumed it was for compilation of iOS apps, do those need a display?