Browser enrollment used osascript on every elevate. Ship a signed privileged helper installed at PKG time so probo:// can enroll over XPC with no second admin prompt. Add make install/uninstall/clean for local PKG test loops, and show alerts only on failure. Mirror the Go lint path for the macOS SPM package: Make targets, root configs, and a Linux CI job. Keep checks syntax-only so they do not need a macOS SDK. Format the existing sources so the new gates start clean. Signed-off-by: Ludovic Vielle <ludovic@probo.com>
59 lines
2.1 KiB
XML
59 lines
2.1 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!--
|
|
Productbuild distribution definition for the Probo device posture
|
|
agent.
|
|
|
|
Placeholders are substituted by build.sh:
|
|
|
|
@@VERSION@@ agent version, e.g. 0.1.0
|
|
@@PKG_ARCH@@ reserved (legacy; host filter uses @@HOST_ARCHS@@)
|
|
@@HOST_ARCHS@@ host arch filter used by Installer.app
|
|
(e.g. arm64 or arm64,x86_64 for universal)
|
|
@@IDENTIFIER@@ package identifier (default com.probo.agent)
|
|
-->
|
|
<installer-gui-script minSpecVersion="2">
|
|
<title>Probo Device Posture Agent @@VERSION@@</title>
|
|
|
|
<!--
|
|
Single-pane install. Customization is disabled because the agent
|
|
is a single component and we do not want users to opt out of the
|
|
postinstall script.
|
|
-->
|
|
<options customize="never"
|
|
require-scripts="true"
|
|
rootVolumeOnly="true"
|
|
hostArchitectures="@@HOST_ARCHS@@"/>
|
|
|
|
<!--
|
|
Refuse installation on macOS older than 11 (Big Sur). The agent
|
|
relies on launchd bootstrap/bootout semantics and the modern
|
|
`system_profiler` output that earlier releases do not provide.
|
|
-->
|
|
<volume-check>
|
|
<allowed-os-versions>
|
|
<os-version min="11.0"/>
|
|
</allowed-os-versions>
|
|
</volume-check>
|
|
|
|
<welcome file="welcome.html" mime-type="text/html"/>
|
|
<license file="license.txt" mime-type="text/plain"/>
|
|
<conclusion file="conclusion.html" mime-type="text/html"/>
|
|
|
|
<pkg-ref id="@@IDENTIFIER@@"
|
|
version="@@VERSION@@"
|
|
onConclusion="none">probo-agent-component.pkg</pkg-ref>
|
|
|
|
<choices-outline>
|
|
<line choice="default">
|
|
<line choice="@@IDENTIFIER@@"/>
|
|
</line>
|
|
</choices-outline>
|
|
|
|
<choice id="default"/>
|
|
<choice id="@@IDENTIFIER@@"
|
|
title="Probo Device Posture Agent"
|
|
description="Installs probo-agent, the menu bar helper LaunchAgent, and Probo Agent.app for probo:// enrollment. The LaunchDaemon starts after enrollment.">
|
|
<pkg-ref id="@@IDENTIFIER@@"/>
|
|
</choice>
|
|
</installer-gui-script>
|