Azure Blob Storage Authentication for Munki
The Azure Blob Storage Middleware allows munki clients to connect securely, and directly to a munki repo hosted in an Azure Blob Storage account.
Description
This module is meant to plug into munki as a middleware. https://github.com/munki/munki/wiki
The script will generate the required http headers to interact with an protected Azure blob storage account. Inspired by S3-Auth (https://github.com/waderobson/s3-auth)
MS reference docs for Storage REST API Auth and interaction https://docs.microsoft.com/en-us/azure/storage/common/storage-rest-api-auth
Configuration
Defaults must be in place (replace with your account and example assumes containername = munki):
sudo defaults write /Library/Preferences/ManagedInstalls SoftwareRepoURL 'http://yourstorageaccount.blob.core.windows.net/munki'
sudo defaults write /Library/Preferences/ManagedInstalls StorageAccountKey 'XXX'
Configuration via MDM
SoftwareRepoURL
http://yourstorageaccount.blob.core.windows.net/munki
StorageAccountKey
XXX
Check my macOS GitHub repo for a sample MDM .mobileconfig file.
Location
copy to '/usr/local/munki/middleware_azure.py'
Permissions
sudo chown root /usr/local/munki/middleware*.py
sudo chmod 600 /usr/local/munki/middleware*.py
Debugging
log files for munki are stored here:
/Library/Managed Installs/Logs/
If required set LoggingLevel higher than 1 e.g. 2 or 3
sudo defaults write /Library/Preferences/ManagedInstalls LoggingLevel -int 3
Further reading
If you are interested in a blog article detailing a bit more of the middleware in action with Microsoft Intune then have a look here:
https://oliverkieselbach.com/2021/07/14/comprehensive-guide-to-managing-macos-with-intune/
5 Jun 25, 2021
0 Mar 16, 2022
1 Oct 23, 2021
2 May 22, 2022
1 Nov 3, 2021
8 Nov 17, 2022
22 Jan 3, 2023
31 Nov 29, 2022
5 Dec 24, 2022
4 Feb 27, 2022
30 Oct 21, 2022
0 Dec 16, 2021
0 Nov 3, 2021
1 Nov 9, 2021
116 Nov 25, 2022
10 Dec 28, 2022
1 Dec 7, 2021
9 Apr 13, 2022
3 Jun 3, 2022