I’ve recently run into problems getting updates from Autopkg and Autopkgr to import into the Munki Repo. Most of the time I use Autopkgr (the GUI for Autopkg) because I have all of the software updates checked and I just have to Run Recipes Now and all of my software updates are downloaded and imported into the Munki Repo.
Lately, I’ve been seeing a lot of errors on various recipes, like Thunderbird, Firefox, etc. It’s always the same error for each recipe that fails. Here is an example:
Error in local.munki.VLC: Processor: CodeSignatureVerifier: Error: unmounting /path/to/recipe/VLC.dmg failed: hdiutil: couldn't unmount "disk1" - Resource busy
It turns out the Anti-Virus client is trying to scan each .dmg as its mounted and hangs the disk so it can’t be unmounted by Autopkg. I’ve configured the AV client to not scan mounted disk, but still get the same error on some of the recipes.
My workaround for this is to disable the AV client while I run Autopkg and then enable AV client once all of the updates have imported into the Munki Repo.
I create local overrides and verify the trust of all recipes before downloading so I know they are safe before they are downloaded and installed.