macOS Deployment

Disclaimer

Please do not blindly run this on a system that you care about. These settings have been hand picked and match my personal preferences. On the other hand if you would like to please feel free to contribute.

Goal

Secure and automated setup for macOS with little to no user intervention.

Although most sources had the MIT License applied I would like to give credit to the following projects:

• fgimian/macbuild: https://github.com/fgimian/macbuild
• kcrawford/dockutil https://github.com/kcrawford/dockutil
• fubarhouse/mac-dev-playbook https://github.com/fubarhouse/mac-dev-playbook
• ricba/dotfiles https://github.com/ricbra/dotfiles
• drduh/macOS-Security-and-Privacy-Guide https://github.com/drduh/macOS-Security-and-Privacy-Guide/blob/master/README.md
• kristovatlas/osx-config-check https://github.com/kristovatlas/osx-config-check
• https://blog.vandenbrand.org/2016/01/04/how-to-automate-your-mac-os-x-setup-with-ansible/

Usage

git clone https://github.com/flyingtongue/macos_automation.git
cd macos_automation
./setup.sh

app store setup

If you would like to use apps from Apple App Store you will need to login prior to running this ansible playbook. Apple cli tools no longer work to login (mas).

TODO

Filevault2 -- https://derflounder.wordpress.com/2015/02/02/managing-yosemites-filevault-2-with-fdesetup/ http://blog.frizk.net/2016/12/filevault-password-retrieval.html?m=1

crontab to run mas update

ssh keygen

openssh update

add little snitch to external software

add chrome extensions