NicoandLucas Manuel Rodriguez
b42fc182fe
Fix fleetd in-band upgrade on macOS hosts (#42187)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #32126
# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
## Testing
- [ ] Added/updated automated tests
- [x] QA'd all new/changed functionality manually
Steps:
- Have fleetd installed on the host.
- `make build` and re-run the server.
- Generate a new fleetd package: `./build/fleetctl package --type=pkg
--enable-scripts --fleet-desktop --fleet-url=<URL>
--enroll-secret=<SECRET>`
- Upload the newly-generated `fleet-osquery.pkg` to Host details >
Software > Library.
- Click `Install`.
- When the install finishes, verify that the UI says `Installed`:
<img width="1433" height="392" alt="Screenshot 2026-03-20 at 4 42 19 PM"
src="https://github.com/user-attachments/assets/ec78b63e-e5c7-4b27-acde-4e4f63f5f7b2"
/>
- Verified logs:
`/var/log/orbit/orbit.stderr.log` logs after successful upgrade:
```
2026-03-20T16:24:58-03:00 INF hash(orbit)=4ba4729515dc6923cf54eaca610c6dbded344941a10e552579c19676b7419bc5643e98fd8cf404d8ed2cd6168d7b756b2df56997ff41b51b520fa6456b407979
2026-03-20T16:24:58-03:00 INF hash(osqueryd)=9d2ab3eb30537e38c78a089ae28196d34afc436030bca10ae60a06fd20e344bc911ab0e036e8abb44e401809b6056a04aa9dddf00d90386a451fe55ca3a0ffe8
2026-03-20T16:24:58-03:00 INF hash(desktop)=9317a1617709492dec2cb2ff3821412e5061c402b1c7988f16a99faa81b2c8dffa1fb038d5fb8c4dae67e5545a577bbe6b1a8c13adb39453b2ba7bddfb36dafa
2026-03-20T16:24:58-03:00 INF orbit version: 1.53.1
2026-03-20T16:25:00-03:00 INF Found osquery version: 5.21.0
2026-03-20T16:25:12-03:00 INF token rotation is enabled
2026-03-20T16:25:14-03:00 INF Found fleet-desktop version: 1.53.1
2026-03-20T16:25:14-03:00 INF checking for custom mdm enrollment profile with end user email
2026-03-20T16:25:14-03:00 INF get custom enrollment profile end user email: profile not found
2026-03-20T16:25:14-03:00 INF orbitClient.GetServerCapabilities() map[end_user_email:{} escrow_buddy:{} linux_disk_encryption_escrow:{} macos_web_setup_experience:{} orbit_endpoints:{} setup_experience:{} token_rotation:{} web_setup_experience:{}]
2026-03-20T16:25:14-03:00 INF opening path="/opt/orbit/bin/desktop/macos/stable/Fleet Desktop.app"
2026-03-20T16:25:14-03:00 INF start osqueryd cmd="/opt/orbit/bin/osqueryd/macos-app/stable/osquery.app/Contents/MacOS/osqueryd --pidfile=/opt/orbit/osquery.pid --extensions_socket=/opt/orbit/orbit-osquery.em --logger_path=/opt/orbit/osquery_log --enroll_secret_env ENROLL_SECRET --tls_hostname=nicofleet.ngrok.io --enroll_tls_endpoint=/api/v1/osquery/enroll --config_plugin=tls --config_tls_endpoint=/api/v1/osquery/config --config_refresh=60 --disable_distributed=false --distributed_plugin=tls --distributed_tls_max_attempts=10 --distributed_tls_read_endpoint=/api/v1/osquery/distributed/read --distributed_tls_write_endpoint=/api/v1/osquery/distributed/write --logger_plugin=tls,filesystem --logger_tls_endpoint=/api/v1/osquery/log --disable_carver=false --carver_disable_function=false --carver_start_endpoint=/api/v1/osquery/carve/begin --carver_continue_endpoint=/api/v1/osquery/carve/block --carver_block_size=8000000 --tls_accept_gzip=true --tls_server_certs /opt/orbit/certs.pem --augeas_lenses /opt/orbit/lenses --force --flagfile /opt/orbit/osquery.flags --host-identifier uuid --database_path /opt/orbit/osquery.db"
2026-03-20T16:25:14-03:00 INF killing any pre-existing fleet-desktop instances
I0320 16:25:20.108963 1878142976 interface.cpp:137] Registering extension (com.fleetdm.orbit.osquery_extension.v1, 45937, version=, sdk=)
I0320 16:25:30.446642 194764992 eventfactory.cpp:156] Event publisher not enabled: endpointsecurity: EndpointSecurity is disabled via configuration
I0320 16:25:30.474906 194764992 eventfactory.cpp:156] Event publisher not enabled: endpointsecurity_fim: EndpointSecurity is disabled via configuration
I0320 16:25:30.475134 194764992 eventfactory.cpp:156] Event publisher not enabled: openbsm: Publisher disabled via configuration
I0320 16:25:30.475183 194764992 eventfactory.cpp:156] Event publisher not enabled: scnetwork: Publisher not used
I0320 16:25:30.475217 194764992 eventfactory.cpp:156] Event publisher not enabled: event_tapping: Publisher disabled via configuration
2026-03-20T16:27:14-03:00 INF received notification for software installers: [147149e7-2634-4b23-b724-aafc995e3f09] runner=installer
2026-03-20T16:27:14-03:00 INF processing installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
2026-03-20T16:27:14-03:00 INF fetching installer details installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
2026-03-20T16:27:14-03:00 INF about to download software installer from Fleet installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
2026-03-20T16:27:37-03:00 INF done downloading installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
2026-03-20T16:27:37-03:00 INF software installer downloaded installerID=147149e7-2634-4b23-b724-aafc995e3f09 installerPath=/tmp/3354102551/fleet-osquery.pkg runner=installer
2026-03-20T16:27:37-03:00 INF about to run install script installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
2026-03-20T16:27:40-03:00 INF install script exitCode=0 installerID=147149e7-2634-4b23-b724-aafc995e3f09 runner=installer
```
---------
Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
2026-03-27 09:04:14 -03:00
..
2026-02-25 15:35:29 -06:00
2026-03-10 14:03:39 -05:00
2026-03-25 10:07:53 +01:00
2026-03-12 16:17:40 -07:00
2026-03-13 16:47:09 -04:00
2026-02-27 12:21:45 -05:00
2026-03-02 09:18:30 -07:00
2026-03-27 09:04:14 -03:00
2026-03-16 16:17:47 -05:00
2026-03-09 16:54:53 -04:00
2026-03-26 19:06:51 -05:00
2026-03-26 18:25:54 -05:00
2026-03-12 15:36:44 -05:00
2026-02-26 07:43:24 -04:00
2026-03-13 12:14:22 -07:00
2026-03-13 14:00:26 -04:00
2026-02-23 08:48:53 -05:00
2026-03-19 14:58:10 -05:00
2026-03-12 14:11:14 -04:00
2026-03-19 22:01:59 -05:00
2026-03-23 10:31:12 -05:00
2026-03-16 15:12:25 -04:00
2026-02-18 12:52:06 -05:00
2026-02-27 14:30:05 -06:00
2026-02-24 15:35:02 -06:00
2026-03-02 12:16:31 -05:00
2026-03-05 15:12:04 -03:00
2026-03-11 13:42:33 -03:00
2026-03-18 12:20:23 -04:00
2026-03-16 11:21:25 -05:00
2026-03-09 09:54:14 -03:00
2026-03-17 12:59:17 -03:00
2026-03-13 15:21:16 -05:00
2026-02-27 14:57:43 -04:00
2026-03-19 11:14:14 -05:00
2026-03-26 13:06:29 -07:00
2026-02-26 12:47:52 -05:00
2026-03-23 09:04:55 -05:00
2026-03-16 15:51:28 -05:00
2026-03-17 12:33:39 -03:00
2026-03-03 14:29:28 -05:00
2026-03-03 12:33:31 -05:00
2026-02-27 16:07:33 -05:00
2026-02-13 16:21:39 -05:00
2026-03-02 15:25:46 -05:00
2026-02-25 14:11:03 -06:00
2026-03-11 19:15:16 -05:00
2026-03-06 10:23:15 -05:00
2026-03-04 11:53:59 -05:00
2026-03-04 13:22:44 -05:00
2026-02-25 09:43:08 -04:00
2026-03-24 10:01:54 -04:00
2026-03-06 12:11:37 -05:00
2026-03-20 15:37:42 -04:00
2026-03-17 12:35:36 -03:00
2026-03-03 14:14:29 -05:00
2026-02-27 14:05:15 -05:00
2026-03-16 12:24:31 -05:00
2026-02-27 10:34:46 -05:00
2026-02-26 11:42:00 -05:00
2026-02-26 11:42:00 -05:00
2026-03-12 16:54:46 -05:00
2026-03-11 14:01:56 -07:00
2026-03-26 15:52:28 -04:00
2026-03-17 07:22:23 -05:00
2026-03-20 10:56:54 +01:00
2026-03-13 13:26:36 -05:00
2026-02-25 15:52:09 -06:00
2026-03-02 15:14:19 -05:00
2026-03-10 14:03:59 -05:00
2026-03-21 10:03:57 -05:00
2026-02-23 09:26:58 -06:00
2026-03-03 14:14:58 -05:00
2026-03-13 13:22:10 -04:00
2026-03-02 16:25:48 -08:00
2026-03-06 14:02:51 -03:00
2026-03-02 22:18:36 -06:00
2026-03-09 09:05:36 -04:00
2026-03-05 17:05:03 -05:00
2026-03-05 18:08:54 -06:00
2026-03-07 17:32:59 -06:00
2026-03-06 16:16:17 -06:00
2026-02-26 12:49:52 -06:00
2026-03-11 19:15:36 -05:00
2026-03-10 15:11:27 -05:00
2026-03-06 14:02:51 -03:00
2026-03-13 08:34:29 -05:00
2026-02-27 08:37:07 -06:00
2026-03-17 12:35:25 -03:00
2026-03-04 11:39:04 -03:00
2026-03-10 13:20:43 -03:00
2026-03-04 09:58:27 -06:00
2026-03-16 10:37:06 -05:00
2026-03-06 17:41:31 -03:00
2026-03-03 17:16:10 -06:00
2026-03-19 15:37:22 -04:00
2026-03-04 14:03:34 -05:00
2026-03-09 15:39:13 -05:00
2026-03-09 08:56:05 -05:00
2026-03-06 17:41:28 -06:00
2026-03-11 11:38:07 -05:00
2026-03-13 15:17:05 -05:00
2026-03-09 17:23:44 -03:00
2026-03-13 15:21:24 -05:00
2026-03-10 14:03:25 -05:00
2026-03-13 14:16:07 -04:00
2026-03-18 13:27:53 -04:00
2026-03-20 17:27:27 -05:00
2026-03-13 13:25:35 -05:00
2026-03-18 11:03:48 -04:00
2026-03-26 07:04:18 -04:00
2026-03-23 17:01:52 -04:00
2026-03-20 10:35:56 -05:00
2026-03-20 10:30:52 -05:00
2026-03-24 17:53:19 -04:00
2026-03-24 17:48:02 -05:00
2026-03-16 11:42:58 -03:00
2026-03-13 09:02:40 -07:00
2026-03-13 18:10:55 -04:00
2026-03-17 10:34:52 -05:00
2026-03-26 12:12:41 -06:00
2026-03-20 10:36:14 -05:00
2026-03-17 06:55:22 -04:00
2026-03-16 16:09:43 -05:00
2026-03-17 09:59:03 -05:00
2026-03-17 15:04:33 -04:00
2026-03-25 10:32:41 -04:00
2026-03-18 13:59:28 -05:00
2026-03-24 10:45:34 -03:00
2026-03-23 10:33:48 -03:00
2026-03-24 10:53:23 -04:00
2026-03-25 16:34:59 -03:00
2026-03-26 11:29:20 -05:00
2026-03-25 15:10:40 -05:00
2026-03-25 16:02:54 -05:00
2026-03-20 14:24:29 -05:00
2026-03-20 14:24:29 -05:00
2026-02-27 17:09:54 -03:00
2026-02-24 11:25:00 -03:00
2026-03-25 06:27:58 -03:00
2026-03-05 17:02:21 +00:00
2026-03-04 13:12:33 +00:00
2026-02-27 17:03:52 +00:00
2026-02-27 17:04:14 +00:00
2026-03-19 22:01:44 -05:00
2026-03-17 10:20:09 -05:00
2026-03-19 07:01:00 -05:00