How to List Munki Conditions Across All Macs
Using Kolide, you can easily view and query Mac Munki Conditions across your fleet.
Introduction
This inventory displays all of the items in the conditions dictionary that Munki administrators can use to conditionally deploy software to your device. This information is usually populated by scripts that are run on your device on regular intervals.
The Munki project describes itself as:
Munki is a set of tools that, used together with a webserver-based repository of packages and package metadata, can be used by macOS administrators to manage software installs (and in many cases removals) on macOS client machines.
For more information about the Munki project, please refer to its official website: The Munki Project and the GitHub project.
What Mac Munki Condition Data Can Kolide Collect?
Kolide's endpoint agent bundles in osquery to efficiently collect Mac Munki Conditions from Macs in your fleet. Once collected, Kolide will parse, clean up, and centrally store this data in Inventory for your team to view, query, or export via API.
Kolide meticulously documents every piece of data returned so you can understand the results.
Mac Munki Conditions Schema
| Column | Type | Description | |
|---|---|---|---|
| id | Primary Key |
Unique identifier for the object |
|
| device_id | Foreign Key |
Device associated with the entry |
|
| device_name | Text |
Display name of the device associated with the entry |
|
| key | Text |
The key name of the Munki condition |
|
| value | Text |
The value of the Munki condition |
|
| collected_at | Timestamp |
Time the row of data was first collected in the database |
|
| updated_at | Timestamp |
Time the row of data was last changed in the database |
|
Why Should I Collect Mac Munki Conditions?
IT and Security Administrators can review this inventory to see exactly what conditions the Munki client is using to determine what software to install on your device. They can use this inventory to identify any missing conditions or innacurate conditions that do not match the true state of the device.
End-User Privacy Consideration
Kolide practices Honest Security. We believe that data should be collected from end-user devices transparently and with privacy in mind.
The data in Munki conditions is collected by scripts run by your device's administrator. The contents of these conditions are unknown to Kolide before they are collected. Generally they contain useful facts about your device like the version of the OS or if your Mac has certain hardware features.
That said, they could also contain information like your iCloud email address the hostname of your device, or other unique information like Mac serial number. You can always review the data collected by exporting information about your device in the Kolide privacy center.
When you use Kolide to list Mac Munki Condition data from end-user devices, Kolide gives the people using those devices insight into exactly what data is collected, the privacy implications, and who on the IT team can see the data. This all happens in our end-user privacy center which can be accessed directly by employees.
