Managing Macs at Google Scale
summary
Google manages about 43,000 Macs worldwide and describes the actual stack: a single monolithic image built with CanHasImage, Puppet for configuration, crankd for network and event triggers, Monkey + Simeon on App Engine for package delivery, Luggage for packaging, and a FileVault key escrow system called Cauliflower Vest. 95–99.5% of the fleet moves from 10.7 to 10.8 in roughly eight weeks. A shell watchdog called Plan B auto‑repairs broken management agents and all access and key retrieval is audited.
AI-written summary · about
chapters (6)
- 0:00Start
- 9:51Managing Macs
- 16:09The Google Inventory
- 16:52Management Tasks and Tools
- 31:11Cauliflower Vest
- 34:00Summary
related talks
14mEfficient Linux Client Management
38mMinijail: Running Untrusted Programs Safely
20mNew Frontiers
24mEvolution of Unix environments and the road to faster deployments
41mCloud Computing with KVM
31mOptimizing Cost and Performance with arm64
19m"ClangBuiltLinux: What's Next?"
44mIcebreaker: Introducing Upstream Kernels to Google’s Data-centers