TweetFollow Us on Twitter

MacEnterprise: "Image"ine That!

Volume Number: 24 (2008)
Issue Number: 03
Column Tag: MacEnterprise

MacEnterprise: "Image"ine That!

A fresh look at creating deployment images

By Philip Rinehart, Yale University

Images?

In the System Imaging and Deployment Power Tools session at Macworld this year, there was a large amount of time spent discussing system imaging. How does it work? What are best practices? Are there best practices? How do you deal with new hardware, and more were asked. I thought it would be useful this month to reexamine the practice of image creation. Let's start by looking at what we mean by an image.

The "Image"

In traditional Macintosh system administration, an image is a base operating system plus some amount of software that is applied to one or more machines. In general, the nirvana has been to create a single image that can be applied to many different models of Mac machines. Is this goal achievable, or is it like Buddhism, in which the journey is more important?

Rule 1: currency

The first rule of system imaging is that an image must be created from the most current model of Macintosh in any deployment. Typically this image is created from the installation media that was shipped with the hardware. For example, if your deployment includes a quad core Intel machine, then create the image from that disc. Is this rule inviolable? No.

How do you update an existing image? Wait until the dot release update. That is, if your image was created on 10.4.10, update your image for new hardware at 10.4.11. There is some debate about using a combo updater or a delta. Generally, I prefer to use the combo updater, as each and every update from the Gold Master is applied. This method can be used to update existing images pretty reliably. There are of course exceptions, but now that a universal operating system is available, Leopard, this method should work in most cases.

Rule 2: User templates

The second rule of thumb in system imaging is how to create a default template. Note that this method applies to local accounts, not network accounts. First, create a template user using system preferences. Next, login as that user, and run each application that it is important to configure. Common configuration items include web browsers, word processing applications, or site-specific applications that need consistent settings. There are a couple of gotchas though.

First, for the template user, don't store anything in the keychain. When the template is copied over any item stored in the keychain will be inaccessible to the new account. It is safe to delete the keychain after finishing custom configuration as well. Secondly, be certain to set the proper downloads folder for each web browser. In Tiger, if the Safari download folder were not set, a copied template would contain an inaccessible path. The last gotcha is for any preferences that are machine specific. This type of preference is usually stored in ~/Library/Preferences/ByHost. Common items here include iTunes preferences, screensaver preferences, and others. A hardware address is embedded in the preference file name. It can be corrected with a loginhook.

Rule 3: Cleanup

Before applying any image, it is important to do some basic cleanup. What should be cleaned up though? There are a few obvious things to remove for initial cleanup. Get rid of any Cache files stored in /Library/Caches, and /System/Library/Caches. Next, remove both swap files and sleep images. These are located in the directory /var/vm, and can be significant in size. One other cache can also be removed, the BootCache.playlist located in /private/var/db.

What about other types of files? Generally, I would recommend moving the Network Interfaces plist in /Library/Preferences/SystemConfiguration. In general, these files are machine specific, and will get recreated by the operating system on first boot. This also removes any possible conflict if an image has a different network interface configuration then its target.

System wide, these files are ignored by Time Machine, and can probably be eliminated from any image.

                      /.Spotlight-V100
                /.Trashes
                /.fseventsd
                /.hotfiles.btree
                /Backups.backupdb
                /Desktop DB
                /Desktop DF
                /Network/Servers
                /Previous Systems
                /Users/Shared/SC Info
                /Users/Guest
                /dev
                /home
                /net
                /private/var/db/Spotlight
                /private/var/db/Spotlight-V100

Note that most of these files are fairly logical to be excluded. The operating system will recreate any of these files at first boot.

Clean up of the User Template can also be a little more complete as well. Here are the files that can be excluded from the User Template. Most are related to browsers and rss feeds.

                    Library/Application Support/MobileSync
                Library/Application Support/SyncServices
                Library/Caches
                Library/Logs
                Library/Mail/Envelope Index
                Library/Mail/AvailableFeeds
                Library/Mirrors
                Library/PubSub/Database
                Library/PubSub/Downloads
                Library/PubSub/Feeds
                Library/Safari/Icons.db
                Library/Safari/HistoryIndex.sk

The last thing to eliminate is any Log files, both in /Library/Logs and /private/var/log. No need to have any of these items on an image! Note that the cleanup process is best scripted, as no one really wants to remember all of these steps!

Apple software restore

Now that you have created your "perfect" image, it is time to get it ready for deployment. Are there best practices here? I think so. First, it is best to boot from an alternate volume. This volume can be a separate partition, or an external drive. Once booted the steps are pretty straightforward.

1. Open Disk Utility

2. Select the drive or partition that is the model for imaging

3. Select "Image from Folder" and select the hard drive and wait. A long time.

4. Select "Scan Image for Restore" and scan the newly created dmg file.

That's it! You then have an image that is ready for deployment via whatever method you have in place to put an image on a machine via multicast ASR, NetRestore, or any other method you have of getting the image on the machine. One important note though, it is generally best to have at least twice the amount of space needed to create an image on your external drive. If your drive has any less than that, the imaging operation may fail.

The future

The method I have just described is the "Classic" way of creating methods and is fairly tried and true. However, it isn't really very scalable, or flexible as the image is a point in time snapshot. The way of the future can be seen in two areas, the new System Imaging Utility in Leopard and InstaDMG from afp548.com. Both take the idea of monolithic image creation, and move it to a more modular approach. Ultimately this approach is far more flexible, allowing updating any image at a moments notice. It also makes it easier to be extremely flexible and adaptable, which is a good thing in today's fast moving environments. It was good to see all at Macworld this year, until next month see you on the lists!


Philip Rinehart is co-chair of the steering committee leading the Mac OS X Enterprise Project (macenterprise.org) and is the Lead Mac Analyst at Yale University. He has been using Macintosh Computers since the days of the Macintosh SE, and Mac OS X since its Developer Preview Release. Before coming to Yale, he worked as a Unix system administrator for a dot-com company. He can be reached at: philip.rinehart@yale.edu. The MacEnterprise project is a community of IT professionals sharing information and solutions to support Macs in an enterprise. We collaborate on the deployment, management, and integration of Mac OS X client and server computers into multi-platform computing environments.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

OmniOutliner Pro 4.2 - Pro version of th...
OmniOutliner Pro is a flexible program for creating, collecting, and organizing information. Give your creativity a kick start by using an application that's actually designed to help you think. It's... Read more
VLC Media Player 2.2.1 - Popular multime...
VLC Media Player is a highly portable multimedia player for various audio and video formats (MPEG-1, MPEG-2, MPEG-4, DivX, MP3, OGG, ...) as well as DVDs, VCDs, and various streaming protocols. It... Read more
Nisus Writer Pro 2.1.1 - Multilingual wo...
Nisus Writer Pro is a powerful multilingual word processor, similar to its entry level products, but brings new features such as table of contents, indexing, bookmarks, widow and orphan control,... Read more
Tinderbox 6.2.0 - Store and organize you...
Tinderbox is a personal content management assistant. It stores your notes, ideas, and plans. It can help you organize and understand them. And Tinderbox helps you share ideas through Web journals... Read more
OmniOutliner 4.2 - Organize your ideas,...
OmniOutliner is a flexible program for creating, collecting, and organizing information. Give your creativity a kick start by using an application that's actually designed to help you think. It's... Read more
Things 2.5.4 - Elegant personal task man...
Things is a task management solution that helps to organize your tasks in an elegant and intuitive way. Things combines powerful features with simplicity through the use of tags and its intelligent... Read more
NeoOffice 2014.10 - Mac-tailored, OpenOf...
NeoOffice is a complete office suite for OS X. With NeoOffice, users can view, edit, and save OpenOffice documents, PDF files, and most Microsoft Word, Excel, and PowerPoint documents. NeoOffice 3.x... Read more
iPhoto Library Manager 4.2 - Manage mult...
iPhoto Library Manager allows you to organize your photos among multiple iPhoto libraries, rather than having to store all of your photos in one giant library. You can browse the photos in all your... Read more
Web Snapper 3.3.8 - Capture entire Web p...
Web Snapper lets you capture Web pages exactly as they appear in your browser. You can send them to a file as images or vector-based, multi-page PDFs. It captures the whole Web page - eliminating the... Read more
TeamViewer 10.0.41404 - Establish remote...
TeamViewer gives you remote control of any computer or Mac over the Internet within seconds, or can be used for online meetings. Find out why more than 200 million users trust TeamViewer! Free for... Read more

Chainsaw Warrior: Lords of the Night has...
It's time to put the Darkness back in its place now that Chainsaw Warrior: Lords of the Night has officially made it to iOS. | Read more »
A World of Ice and Fire Lets You Stalk 2...
George R. R. Martin’s A World of Ice and Fire, by Random House, is a mobile guide to the epic series. The new update gives you the Journeys map feture that will let you track the movements of 25 different characters. But don't worry, you can protect... | Read more »
Gameloft Announces Battle Odyssey, a New...
Battle Odyssey, Gameloft's newest puzzle RPG, is coming to the App Store next week. Set in the world of Pondera, you will need to control the power of the elements to defend the world from evil. You'll be able to entlist over 500 allies to aid you... | Read more »
Fusion - HDR Camera (Photography)
Fusion - HDR Camera 1.0.0 Device: iOS Universal Category: Photography Price: $1.99, Version: 1.0.0 (iTunes) Description: Fusion creates HDR (high dynamic range) photos by capturing different exposures and then combining them into one... | Read more »
Sago Mini Toolbox (Education)
Sago Mini Toolbox 1.1 Device: iOS Universal Category: Education Price: $2.99, Version: 1.1 (iTunes) Description: Come build with the Sago Mini friends! Use a wrench, try a saw, or hammer some nails. From sewing hand puppets to... | Read more »
You Should Probably Grab Hitman GO While...
Hitman GO is a surprisingly cool (yet also incredibly drastic) departure from the Hitman series. It's well worth playing for any puzzle game fans out there, and at the moment you can get your hands - or garrotte if you will - on it for a mere $0.99... | Read more »
IFTTT is Bringing Do Button and Do Note...
IFTTT has announced Do Button and Do Note for the Apple Watch. Do Button lets you make your own personalized button that can connect to things like your Google Drive, control the temperature in your home with Nest Thermostat, or turn the lights on... | Read more »
How Many Days, Hours, and Minutes Are Le...
Countdown, by Yves Tscherry, is now available on the App Store. The app keeps track of countdowns to your favorite things such as someones birthday or days till the New Year. You can display the time in seconds, minutes, hours, days, weeks, months,... | Read more »
The All-New Misfit 2.0 App is Available...
Misfit has just given their app a complete overhaul. Misfit 2.0 now has a brand new interface with a sleek design and is easier to navigate. You'll be able to sync your Misfit device and look up health and fitness information faster than ever before... | Read more »
Halo: Spartan Strike (Games)
Halo: Spartan Strike 1.0 Device: iOS Universal Category: Games Price: $5.99, Version: 1.0 (iTunes) Description: Delve into 30 challenging missions through cities and jungles using a devastating arsenal of weapons, abilities and... | Read more »

Price Scanner via MacPrices.net

TigerText Introduces First Secure Enterprise...
TigerText, a provider of secure, real-time messaging for the enterprise, has announced the launch of TigerText for the Apple Watch. TigerText for the Apple Watch enables users to securely send and... Read more
The Conservation Fund Partners with Apple To...
The Conservation Fund has announced that it will partner with Apple to help protect working forests in the United States. The Apple initiative will conserve more than 36,000 acres of working... Read more
Clearance 13-inch 2.6GHz Retina MacBook Pro a...
B&H Photo has clearance 2014 13″ 2.6GHz/128GB Retina MacBook Pros now available for $1099, or $200 off original MSRP. Shipping is free, and B&H charges NY sales tax only. Read more
Apple refurbished 2014 13-inch Retina MacBook...
The Apple Store has Apple Certified Refurbished 2014 13″ Retina MacBook Pros available for up to $400 off original MSRP, starting at $979. An Apple one-year warranty is included with each model, and... Read more
iMacs on sale for up to $205 off MSRP, NY tax...
B&H Photo has 21″ and 27″ iMacs on sale for up to $205 off MSRP including free shipping plus NY sales tax only: - 21″ 1.4GHz iMac: $1019 $80 off - 21″ 2.7GHz iMac: $1189 $110 off - 21″ 2.9GHz... Read more
Sale! 16GB iPhone 5S for $1 with service
Best Buy is offering 16GB iPhone 5Ss for $1.00 with 2-year activation at a participating cellular provider. Choose free home shipping and activation, or buy online and activate during in-store pickup... Read more
Apple refurbished 2014 MacBook Airs available...
The Apple Store has Apple Certified Refurbished 2014 MacBook Airs available starting at $679. An Apple one-year warranty is included with each MacBook, and shipping is free. These are currently the... Read more
27-inch 3.5GHz 5K iMac on sale for $2349, sav...
 Adorama has the 27″ 3.5GHz 5K iMac in stock today and on sale for $2349 including free shipping plus NY & NJ sales tax only. Their price is $150 off MSRP. For a limited time, Adorama will... Read more
Save up to $380 on an iMac with Apple refurbi...
The Apple Store has Apple Certified Refurbished iMacs available for up to $380 off the cost of new models. Apple’s one-year warranty is standard, and shipping is free: - 27″ 3.5GHz 5K iMac – $2119 $... Read more
iFixIt Teardown Awards 12-IInch Retina MacBoo...
iFixIt has posted its illustrated teardown of the new 12-inch MacBook Retina. They note that this new MacBook is less than half the thickness of the last Apple notebook called just “MacBook” back in... Read more

Jobs Board

*Apple* Watch SW Application Project Manager...
**Job Summary** The Apple Watch software team is looking for an Application Engineering Project Manager to work on new projects for Apple . The successful candidate Read more
*Apple* Solutions Consultant - Retail Sales...
**Job Summary** As an Apple Solutions Consultant (ASC) you are the link between our customers and our products. Your role is to drive the Apple business in a retail Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
Technical Project Manager - *Apple* Pay - A...
**Job Summary** Apple Pay is seeking an experienced technical PM to…manage the on boarding of new merchants for the Apple Pay platform in the US Within this role you Read more
Senior Identity Architect - *Apple* Pay - A...
**Job Summary** Apple , Inc. is looking for a highly motivated, innovative and hands-on senior identity architect to join the Apple Pay Engineering team. You will Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.