Once again it’s that time of year when Apple release their next macOS, and once again Mac Admins scramble to block user’s updating.
With Jamf restriced policies in place and communications sent to all Mac users and posts on internal intranets you would of thought users would get the message to hold off updating…..but still they try.
The main issue though is now Catalina is available it will only be weeks until Mac’s ship with it installed as default. Apple confirmed to me either these Mac’s will have updated firmware to prevent downgrading to Mojave or downgrading could void the Apple Care for Enterprise warranty. So like every year Mac Admins have to warn users if they buy a Mac and it ships with Catalina don’t expect to use it and certainly don’t expect to be supported (yet).
It’s a odd situation, shiny new macOS being promoted, possible end of year hardware budget needing to be spent as it may be a case of “use it or loose it” but due to Apple’s history on first release and even second and third release not being Enterprise ready (#iamroot) Admins get stuck, users think they are slow and being awkwark as of course “I updated at home and its fine” but all we are really doing is trying to stop the pain and issues early upgrading will cause.
If Apple really want Mac’s in the Enterprise on ordering Enterprise Mac Teams should be able to state (with some restriction) the OS required, even if its latest version of previous, so Mojave 10.14.6 (18G103) at least for the first 3-4 months after the new OS is avialable.
Come on Apple make this happen, make Apple in Enterprise great not frustrating.
Hoobs is a simple Homebridge implementation, takes minuets to get up and running on a Raspberry Pi.
But as its on a Raspberry Pi you can also run other applications, for example AdGuard Home. AdGuard is a DNS AdBlocker, you simply run, configure and then set up your router with DNS IP of your AdGuard install. Your network devices will eventually start using this as their DNS. Its similar to piHole but better 🙂
Simply open your Hoobs Homebridge site which is usually http://hoobs.local/ From the three vertical dots on the far right select Terminal and install AdGuard
My commands are bold and this shows full output:
hoobs@hoobs:/var/lib/homebridge $ cd $HOME hoobs@hoobs:~ $ wget https://static.adguard.com/adguardhome/release/AdGuardHome_linux_arm.tar.gz --2019-10-09 13:52:29-- https://static.adguard.com/adguardhome/release/AdGuardHome_linux_arm.tar.gz Resolving static.adguard.com (static.adguard.com)... 220.127.116.11, 18.104.22.168, 2606:4700:10::6814:1e82, ... Connecting to static.adguard.com (static.adguard.com)|22.214.171.124|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 5280981 (5.0M) [application/octet-stream] Saving to: ‘AdGuardHome_linux_arm.tar.gz’
AdGuardHome_linux_arm.tar.gz 100%[========================================================>] 5.04M 6.61MB/s in 0.8s
hoobs@hoobs:~ $ tar xvf AdGuardHome_linux_arm.tar.gz AdGuardHome/ AdGuardHome/AdGuardHome AdGuardHome/LICENSE.txt AdGuardHome/README.md hoobs@hoobs:~ $ cd AdGuardHome/ hoobs@hoobs:~/AdGuardHome $ sudo ./AdGuardHome -s install 2019/10/09 13:53:03 [info] Service control action: install 2019/10/09 13:53:05 [info] Action install has been done successfully on linux-systemd 2019/10/09 13:53:05 [info] Service has been started 2019/10/09 13:53:05 [info] Almost ready! AdGuard Home is successfully installed and will automatically start on boot. There are a few more things that must be configured before you can use it. Click on the link below and follow the Installation Wizard steps to finish setup. 2019/10/09 13:53:05 [info] AdGuard Home is available on the following addresses: 2019/10/09 13:53:05 [info] Go to http://127.0.0.1:3000 2019/10/09 13:53:05 [info] Go to http://192.168.1.55:3000 hoobs@hoobs:~/AdGuardHome $
Thats’ it. AdGuard is now up and running at the IP address shown i the last output which is obviousy the same as your Hoobs IP. You then configure AdGuard via the web interface. The only setting to change is the interface port number as Hoobs is using 80 and 8080 so just pick something, I used 90. AdGuard will show in red if a conflict.