{"id":193,"date":"2019-02-04T06:00:13","date_gmt":"2019-02-04T06:00:13","guid":{"rendered":"https:\/\/www.alansiu.net\/munkiguide\/?p=193"},"modified":"2025-08-08T01:58:13","modified_gmt":"2025-08-08T01:58:13","slug":"setting-up-and-using-autopkg-munki-recipes","status":"publish","type":"post","link":"https:\/\/www.alansiu.net\/munkiguide\/setting-up-and-using-autopkg-munki-recipes\/","title":{"rendered":"Setting up and using AutoPkg .munki recipes"},"content":{"rendered":"

Install AutoPkg<\/h3>\n

You can find and install the latest release from the AutoPkg GitHub page<\/a>.<\/p>\n

Set up AutoPkg for Munki<\/h3>\n

Because of how GitHub has made it so you have to log into GitHub to search it, there’s a website you can use to search AutoPkg recipes: autopkgweb.com<\/a>.<\/p>\n

\"\"
\nYou can search for a recipe, and you’ll see what the recipe is and what the recipe repo is that it belongs to.<\/p>\n

So, in this example, you can see a munkitools6-signed.munki.recipe<\/strong> recipe in the recipes<\/strong> repo.<\/p>\n

You should add that repo to have access to the recipes in it:<\/p>\n

autopkg repo-add recipes<\/strong><\/code><\/p>\n

Then you can make an override for the munkitools6-signed.munki.recipe recipe, so you can use it properly<\/a>.<\/p>\n

autopkg make-override munkitools6-signed.munki.recipe<\/strong>
\nOverride file saved to \/Users\/username<\/em>\/Library\/AutoPkg\/RecipeOverrides\/munkitools6-signed.munki.recipe<\/code><\/p>\n

You’ll also want to make an override for the MakeCatalogs recipe as well:<\/p>\n

autopkg make-override MakeCatalogs.munki<\/strong>
Override file saved to \/Users\/username<\/em>\/Library\/AutoPkg\/RecipeOverrides\/MakeCatalogs.munki.recipe<\/code><\/p>\n

The MakeCatalogs recipe will see if anything new is imported into your Munki repo, and then will run makecatalogs<\/em> if necessary, so your clients can see the changes.<\/p>\n

Make sure you fail recipes that don’t have trust info:<\/p>\n

defaults write com.github.autopkg FAIL_RECIPES_WITHOUT_TRUST_INFO -bool YES<\/strong><\/code><\/p>\n

One final thing you want to do is tell AutoPkg where you Munki repo is:<\/p>\n

defaults write com.github.autopkg MUNKI_REPO \/Users\/Shared\/munki_repo<\/strong><\/code><\/p>\n

Now, you’re ready to run your first .munki AutoPkg recipe.<\/p>\n

Using AutoPkg<\/h3>\n

Try running one .munki recipe:<\/p>\n

autopkg run -v munkitools6-signed.munki.recipe MakeCatalogs.munki.recipe<\/strong><\/code><\/p>\n

The -v<\/em> flag just gives you some more verbose output. You can run it without -v<\/em> for less verbose output, or you can run it with several (-vvv<\/em>) for even more verbose output.<\/p>\n

Make a bunch more overrides for recipes:<\/p>\n


\nautopkg make-override GoogleChrome.munki
\nautopkg make-override Firefox.munki
\nautopkg make-override Spotify.munki
\nautopkg make-override VLC.munki<\/strong><\/code><\/p>\n

You should then be able to run a series of .munki recipes all together:<\/p>\n

autopkg run -v GoogleChrome.munki Firefox.munki Spotify.munki VLC.munki munkitools6-signed.munki MakeCatalogs.munki<\/strong><\/code><\/p>\n

\"MunkiAdmin<\/figure>\n

Now if you go back to MunkiAdmin and Reload<\/strong> your repo, you should see a bunch of new things that AutoPkg fetched.<\/p>\n

If you’re confused a bit about overrides and trust info, you should really read AutoPkg and recipe parent trust info<\/a><\/p>\n

I’ve also written up a script that will prompt you to approve changes in recipes that have been updated.<\/a><\/p>\n

You may also want to check out a project called AutoPkgr<\/a>, which provides a point-and-click GUI for managing AutoPkg repositories and recipes. Just keep in mind that the project is good, but it’s also hasn’t been actively developed in a while.<\/p>\n","protected":false},"excerpt":{"rendered":"

Install AutoPkg You can find and install the latest release from the AutoPkg GitHub page. Set up AutoPkg for Munki Because of how GitHub has made it so you have to log into GitHub to search it, there’s a website you can use to search AutoPkg recipes: autopkgweb.com. You can search for a recipe, and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-193","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_shortlink":"https:\/\/wp.me\/paDrAJ-37","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/posts\/193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/comments?post=193"}],"version-history":[{"count":18,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/posts\/193\/revisions"}],"predecessor-version":[{"id":565,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/posts\/193\/revisions\/565"}],"wp:attachment":[{"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/media?parent=193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/categories?post=193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.alansiu.net\/munkiguide\/wp-json\/wp\/v2\/tags?post=193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}