3 ms·
Interesting that osquery is developed by Facebook and Santa is developed by Google. I do some work with Facebook and during a video conference with one of their
by kripy 8y ago
Interesting that osquery is developed by Facebook and Santa is developed by Google. I do some work with Facebook and during a video conference with one of their employees the connection dropped out. When we reconnected I asked what happened and they said that the machine updated itself. I thought this was kind of an odd time to update and dropped it into the conversation and was told that their laptops are updated every day. Without an understanding of the inner workings of Facebook it seems like they may be snapshotting employee machines, daily.
- antoncohen 8y agoI doubt it was snapshotting. It is common to force OS updates. For macOS there are tools where the employee will be prompted to update, and can dismiss for a while, but eventually they will be forced to restart. My guess is that the Facebook employee had ignored update prompts and was then forced to update. Every day does seem odd, I can't think of an update type that would require restarts/logoff every day. At least a couple years ago Facebook and Dropbox were managing their Macs in similar ways, with similar tools, I'd be surprised if they changed to something that required daily restarts.
- antoncohen 8y agoFacebook has a Chef cookbook called cpe_nightly_reboot for their Macs. I can't think of why that would be required, but they must have a reason. https://github.com/facebook/IT-CPE/tree/master/chef/cookbooks/cpe_nightly_reboot https://github.com/facebook/IT-CPE/tree/master/chef/cookbook...
- MagerValp 8y agoI don't work at Facebook, but I'm fairly certain this is for things like build servers, not client machines. They use Munki for software updates, which, just like you describe, gives the user a grace period where they can reboot at their leisure. Ignore it for long enough and it'll crank up the nagging, and eventually force a reboot.
- icebraining 8y agothis is for things like build servers, not client machines. It talks about killing GUI processes. Is it common to run a display server on macOS servers?
- MagerValp 8y agoYes. Services that can run without a display are better run on a Linux server anyway.
- icebraining 8y agoI assumed it was for compilation of iOS apps, do those need a display?
- saagarjha 8y agoNo, you can compile iOS apps from the command line.
- Miredly 8y agoI don't think it's possible not to.