Ability to generate and download host enrollment package from UI

[harrisonravazzolo]

• csutomer-pingali: Gong snippet
• prospect-interkosmos: Gong snippet
• prospect-ramzel: Gong snippet
• @noahtalerman: User requested this because they want a convenient way to download the agent. They're used to this experience from other MDM solutions. As a Mac Admin I'm not used to having to do all these steps for creating a Windows agent. I have to install Wine as a dependency, install fleetctl, and run fleetctl package just to get one .msi.

---

[noahtalerman]

Moved the original issue description here for safekeeping:

Problem

Gong Quote

we're using macs like i'm on a mac our whole team is on macs and mac os pkg pack package management is a thing we do all the time and it's like easy we don't build msis all the time we don't want to build msis all the time i don't want i had to install brew and install wine and i get it i appreciate that that's like well supported and it works on mac os honestly i do if you said you need to get a windows device and install vs code and then do this thing i would be like i'm not gonna do this i'm just gonna say no so

Fleet console should be able to generate a package, msi, enrollment installer for every operating system so the user does not need to install fleetctl and all the dependencies just to generate a package. In this use case, customer-pingali does not want to need to install Wine on their Mac.

What have you tried?

There is no workaround for this one.

Potential solutions

Through the Fleet console, a user should be able to select the package options, i.e. script enabled, fleet desktop included, etc. and then generate a downloadable installer.

[noahtalerman]

@phtardif1 can you please add Gong snippets for ramzel and interkosmos?

[pintomi1989]

Hey @noahtalerman,

From customer-preston:

Today, we are triggering a task in the AWS Cloud to build the .rpm, .deb, .pkg, .mobileconfig, .msi package We are also signing the .msi and .mobileconfig inside this cloud task

It’s hard to maintain and we feel like it’s not our job but more of the MDM’s job to provide the enrolment package For https://github.com/fleetdm/fleet/issues/22634 to be completly usable for us, it would require :

• ability to pass the end user email as a parameter for the package generation
• ability to either directly get a signed .msi or give a certificate so you can use it to sign the .msi
• ability to either directly get a signed .mobileconfig or give a certificate so you can use it to sign the .mobileconfig

[noahtalerman]

Thanks @pintomi1989. Is that from the shared Google doc?

Also, assuming we don't have a Gong snippet, is it intentional that we're not recording meetings w/ preston?

cc @zayhanlon

[pintomi1989]

Hey @noahtalerman,

That is from a Slack conversation around the issue. We're determining why the meeting recordings for this specific customer are not populating as of late, but it is not intentional. I've talked to @zayhanlon about it and we're working on the root cause.

[zayhanlon]

Recording worked on the last meeting I was on @noahtalerman @pintomi1989

[noahtalerman]

@phtardif1 can you please add Gong snippets for ramzel and interkosmos?

[noahtalerman]

Hey @phtardif1 just giving you another ping! Can you please add Gong snippets for ramzel and interkosmos?

cc @dherder

[dherder]

@noahtalerman DONE