#!/bin/bash
CURRENT_USER=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' )
HOMEDIR=$(/usr/bin/dscl . -read /Users/"$CURRENT_USER" NFSHomeDirectory | /usr/bin/cut -d' ' -f2)
ORG_TOKEN=<ORG_TOKEN>
INTERVAL=600000
SCREEN_RECORD=off
LOCAL_SERVER=on
echo "$ORG_TOKEN"
echo "$CURRENT_USER"
echo "$HOMEDIR"
echo "$LOCAL_SERVER"




echo "writing zluri generic-MDM config file"


if [ ! -d /tmp/zluritemp ]; then
   mkdir -p /tmp/zluritemp
else
   echo "zluritemp dir exists"
fi
echo "{\"org_token\": \"$ORG_TOKEN\", \"interval\": \"$INTERVAL\", \"screen_recording\": \"$SCREEN_RECORD\", \"silent_auth\": \"on\", \"local_server\": \"$LOCAL_SERVER\"}" > /tmp/zluritemp/client-config.json
echo "====written the client config json file required configurations in temp directory===="


# Handle the rosetta-related issues in preinstall script
# Determine the processor brand
processor_brand=$(/usr/sbin/sysctl -n machdep.cpu.brand_string)


# Determine the processor brand
if [[ "$processor_brand" == *"Apple"* ]]; then
   /bin/echo "Apple Processor is present..."


   # Check if the Rosetta service is running
   check_rosetta_status=$(/usr/bin/pgrep oahd)


   # Rosetta Folder location
   # Condition to check to see if the Rosetta folder exists. This check was added
   # because the Rosetta2 service is already running in macOS versions 11.5 and
   # greater without Rosseta2 actually being installed.
   rosetta_folder="/Library/Apple/usr/share/rosetta"


   if [[ -n $check_rosetta_status ]] && [[ -e $rosetta_folder ]]; then
       /bin/echo "Rosetta2 is installed... no action needed"
   else
       # Installs Rosetta
       /bin/echo "Rosetta is not installed... installing now"
       /usr/sbin/softwareupdate --install-rosetta --agree-to-license
   fi
else
   /bin/echo "Apple Processor is not present...Rosetta2 is not needed"
fi


echo "{\"org_token\": \"$ORG_TOKEN\", \"interval\": \"$INTERVAL\", \"screen_recording\": \"$SCREEN_RECORD\", \"silent_auth\": \"on\", \"local_server\": \"$LOCAL_SERVER\"}" > $HOMEDIR/Library/Application\ Support/zluri/client-config.json
echo "====written the client config json file required configurations in appData directory===="


exit 0

#!/bin/bash
CURRENT_USER=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ { print $3 }' )
HOMEDIR=$(/usr/bin/dscl . -read /Users/"$CURRENT_USER" NFSHomeDirectory | /usr/bin/cut -d' ' -f2)
ORG_TOKEN=<ORG_TOKEN>
INTERVAL=600000
SCREEN_RECORD=off
LOCAL_SERVER=on


sudo chown -R ${CURRENT_USER}:wheel /Applications/zluri.app


echo "ORG TOKEN: $ORG_TOKEN"
echo "API INTERVAL: $INTERVAL"
echo "SCREEN RECORD: $SCREEN_RECORD"
echo "CURRENT USER: $CURRENT_USER"
echo "HOMEDIR: $HOMEDIR"
echo "LOCAL_SERVER: $LOCAL_SERVER"


sleep 100


ZLURIDIR="$HOMEDIR/Library/Application Support/zluri"


echo "ZLURIDIR: $ZLURIDIR"


if [ -d "$ZLURIDIR" ]; then
   echo "{\"org_token\": \"$ORG_TOKEN\", \"interval\": \"$INTERVAL\", \"screen_recording\": \"$SCREEN_RECORD\", \"silent_auth\": \"on\", \"local_server\": \"$LOCAL_SERVER\"}" > "$ZLURIDIR"/client-config.json
   echo "===writing config json file to appData directory==="
   else
     echo "zluri folder doesn't exist, cannot write config json file"
fi

1. To set up the post-install script, Go to Commands:
   
   
   
   
2. Click on "+".
   
   

3. Click on the Command:
   

   1. In the Name, you have to mention postinstall

   2. Under Run As: select Root

   3. Under Type: select Mac
      
      
      

4. Copy and paste the above post-install script in place of the Command.

   
   

   

5. Under Launch Event.

   • Event: Run as Repeating 

   • Command Repeats By: Minute

   • Repeat every: 25 minutes
     
     
     
     

6. Under Options, the Timeout after must be 120 seconds or more, depending on the number of machines in your organization.
   
   
   
   
7. Finally, click on save.
   
   >Script 4: Agent runner script
   Command script for agent runner script:
   
   

#!/bin/bash
# Log everything to a file
exec > /tmp/mdm_script_log.txt 2>&1


# Print environment variables
env > /tmp/mdm_env.txt
# Function to get the currently logged-in user
get_logged_in_user() {
   /bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'
}


# Get the currently logged-in user
current_user=$(get_logged_in_user)
# Check if the user is found
if [ -z "$current_user" ]; then
   echo "No user is currently logged in."
   exit 1
fi


echo "Current logged-in user: $current_user"


# export PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/opt/local/bin:/opt/jc/bin


ZLURI_PROCESS=$(pgrep -f zluri | wc -l)
OSQUERY_PROCESS=$(pgrep -f osquery | wc -l)
CURRENT_USER=$(/bin/ls -l /dev/console | awk '{print $3}')
sudo -u "$CURRENT_USER" chown -R ${CURRENT_USER}:staff /Applications/zluri.app


echo "ZLURI_PROCESS count: $ZLURI_PROCESS"
echo "OSQUERY_PROCESS count: $OSQUERY_PROCESS"
echo "CURRENT_USER: $CURRENT_USER"


# zluri not running
if [[ $ZLURI_PROCESS -eq 0 ]] && [[ $OSQUERY_PROCESS -eq 0 ]]
then
   echo "app not running, will open zluri agent"
   # open -a /Applications/zluri.app # open the agent if not running
   su -l "$current_user" -c 'open /Applications/zluri.app'
   if [ $? -ne 0 ]; then
       echo "Failed to open zluri.app, checking logs for more details..."
       log show --predicate 'eventMessage contains "zluri.app"' --info --last 30m
       exit 1
   fi
else
   echo "already running"
fi

1. To set up the agent runner script, Go to Commands:
   
   
   
   
2. Click on "+".
   
   
   
   

3. Click on the Command:

   1. In the Name, you have to mention agent-runner

   2. Under Run As: select Root

   3. Under Type: select Mac
      
      
      

4. Copy and paste the above runner script in place of the Command.
   
   
   
   

5. Under Launch Event.

   1. Event: Run as Repeating 

   2. Command Repeats By: Minute

   3. Repeat every: 10 minutes
      
      
      

6. Under Options, the Timeout after must be 120 seconds or more, depending on the number of machines in your organization.
   
   
   
   
7. Finally, click on save.