Deploying Software to Linux and UNIX Servers in Configuration Manager

Note
The information in this topic applies only to System Center 2012 Configuration Manager SP1.

The Microsoft System Center 2012 Configuration Manager client for Linux and UNIX supports software deployments that use packages and programs. You cannot deploy System Center 2012 Configuration Manager applications to computers that run Linux and UNIX.

The client supports the following functionality for packages and program deployments:

You can install software for Linux and UNIX servers, including the following:
- New software deployment
- Software updates for programs already on the computer
- Operating system patches
You can run native Linux and UNIX commands, and run scripts that are located on Linux and UNIX servers.
You can limit deployment to the operating systems that you specify when you select the program option Only on specified client platforms.
You can use maintenance windows to control when software installs.
You can use deployment status messages to monitor deployments.

When you configure and deploy packages and programs for Linux and UNIX servers, use the same methods that you use to configure and deploy packages and programs to your Windows-based computers with the following caveats:

Configuration	Details
Use only configurations that are intended for computers, and do not use configurations that are intended for users.	The Configuration Manager client for Linux and UNIX does not support configurations that are intended for users.
Configure programs to download the software from the distribution point and run the programs from the local client cache	The Configuration Manager client for Linux and UNIX does not support running software from the distribution point. Instead, you must configure the software to download to the client and then install. By default, after the client for Linux and UNIX installs software, that software is deleted from the client’s cache. However, packages that are configured with Persist content in the client cache are not deleted from the client and remain in the client’s cache after the software installs. The client for Linux and UNIX does not support configurations for the client cache, and the maximum size of the client cache is limited only by the free disk space on the client computer.
Configure the Network Access Account for distribution point access	Linux and UNIX computers are designed to be workgroup computers. In order to access packages from the distribution point in the Configuration Manager site server domain, you must configure the Network Access Account for the site. You must specify this account as a software distribution component property and configure the account before you deploy software. For more information, see Configuring Site Components in Configuration Manager.

Configuration

Details

Use only configurations that are intended for computers, and do not use configurations that are intended for users.

The Configuration Manager client for Linux and UNIX does not support configurations that are intended for users.

Configure programs to download the software from the distribution point and run the programs from the local client cache

The Configuration Manager client for Linux and UNIX does not support running software from the distribution point. Instead, you must configure the software to download to the client and then install.

By default, after the client for Linux and UNIX installs software, that software is deleted from the client’s cache. However, packages that are configured with Persist content in the client cache are not deleted from the client and remain in the client’s cache after the software installs.

The client for Linux and UNIX does not support configurations for the client cache, and the maximum size of the client cache is limited only by the free disk space on the client computer.

Configure the Network Access Account for distribution point access

Linux and UNIX computers are designed to be workgroup computers. In order to access packages from the distribution point in the Configuration Manager site server domain, you must configure the Network Access Account for the site. You must specify this account as a software distribution component property and configure the account before you deploy software.

For more information, see Configuring Site Components in Configuration Manager.

You can deploy packages and programs to collections that contain only Linux or UNIX clients, or you can deploy them to collections that contain a mix of client types, such as the All Systems Collection.

Note
When you deploy software to a mixed collection, it is likely that many clients in the collection are unable to run the software successfully because they are the wrong operating system type to understand the program files. As a result, the deployment will report failure.

When the Configuration Manager client for Linux and UNIX receives and runs a deployment, it generates status messages. You can view these status messages in the Configuration Manager console, or by using reports to monitor the deployment status.

For information about how to use packages and programs, see Packages and Programs in Configuration Manager.

The following sections provide details about software deployment to Linux and UNIX servers.

Configuring Packages, Programs, and Deployments for Linux and UNIX Servers

You can create and deploy packages and programs by using the options that are available by default in the Configuration Manager console. The client does not require any unique configurations.

Use the information in the following sections to configure packages and programs as well as deployments.

Packages and Programs

To create a package and program for a Linux or UNIX server, use the Create Package and Program Wizard from the Configuration Manager console. The client for Linux and UNIX supports most package and program settings. However, several settings are not supported. When you create or configure a package and program, consider the following:

Include the file types that are supported by the destination computers
Define the command lines that are appropriate for use on the destination computer
Settings that interact with users are not supported

The following table lists the properties for packages and programs that are not supported.

Package and program property

Behavior

More information

Package share settings:

All options

An error is generated and the software install fails

The client does not support this configuration. Instead, the client must download the software by using HTTP or HTTPS, and then run the command line from its local cache.

Package update settings:

Disconnect users from distribution points

Setting is ignored

The client does not support this configuration.

Operating system deployment settings:

All options

Settings are ignored

The client does not support this configuration.

Reporting:

Use package properties for status MIF matching
Use these fields for status MIF matching

Settings are ignored

The client does not support the use of status MIF files.

Run:

All options

Settings are ignored

The client always runs packages with no user interface.

The client ignores all configuration options for Run.

After running:

Configuration Manager restarts computer
Program controls restart
Configuration Manager logs the user off

An error is generated and the software install fails

The system restart setting and user specific settings are not supported.

When any setting other than the No action required setting is in use, the client generates an error and continues the software installation, with no action taken.

Program can run:

Only when a user is logged on

An error is generated and the software install fails

User specific settings are not supported.

When this option is configured, the client generates an error and fails the installation of the software.

Other options are ignored and the software installation continues.

Run mode:

Run with user’s rights

Setting is ignored

User specific settings are not supported.

However, the client does support the configuration to run with Administrative rights.

Important
When you specify Run with administrative rights, the Configuration Manager client uses its root credentials.

This setting does not generate an error or log entry. Instead, the software installation fails when the client generates an error for the prerequisite configuration of Program can run = Only when a user is logged on.

Allow users to view and interact with the program installation.

Setting is ignored

User specific settings are not supported.

This configuration is ignored and the software installation continues.

Drive mode:

All options

Settings are ignored

This setting is not supported because content is always downloaded to the client and run locally.

Run another program first

An error is generated and the software install fails

Recursive program installation is not supported.

When a program is configured to run another program first, the software installation fails, and the other program installation is not started.

When this program is assigned to a computer:

Run once for every user who logs on

Setting is ignored

User specific settings are not supported.

However, the client does support the configuration to run once for the computer.

This setting does not generate an error or log entry because an error and log entry are already created for the prerequisite configuration of Program can run = Only when a user is logged on.

Suppress program notifications.

Setting is ignored

The client does not implement a user interface.

When this configuration is selected, it is ignored and the software installation continues.

Disable this program on computers where it is deployed

Setting is ignored

This setting is not supported and does not affect the installation of software.

Allow this program to be installed from the Install Package task sequence without being deployed.

Setting is ignored

The client does not support task sequences.

This setting is not supported and does not affect the installation of software.

Windows Installer:

All options

Settings are ignored

The client does not support Windows Installer files or settings.

OpsMgr Maintenance Mode:

All options

Settings are ignored

The client does not support this configuration.

For information about how to create a package and program, see How to Create Packages and Programs in Configuration Manager.

Deployments

To deploy software to a Linux or UNIX server by using a package and program, you can use the Deploy Software Wizard from the Configuration Manager console. Most deployment settings are supported by the client for Linux and UNIX, however several settings are not supported. When you deploy software consider the following:

You must provision the package on at least one distribution point that is associated with a boundary group that is configured for content location.
The client for Linux and UNIX that receive this deployment must be able to access this distribution point from its network location.
The client for Linux and UNIX downloads the package from the distribution point and runs the program on the local computer.
The client for Linux and UNIX cannot download packages from shared folders. It downloads packages from IIS enabled distribution points that support HTTP or HTTPS.

The following table lists properties for deployments that are not supported:

Deployment property	Behavior	More information
Deployment settings – purpose: Available Required	Setting is ignored	User specific settings are not supported. However, the client supports the setting Required, which enforces the scheduled installation time, but does not support manual installation prior to that scheduled time.
Send wake-up packets	Setting is ignored	The client does not support this configuration.
Assignment schedule: logon logoff	An error is generated and the software install fails	User specific settings are not supported. However, the client supports the setting As soon as possible.
Notification settings: Allow users to run the program independently of assignments	Setting is ignored	The client does not implement a user interface.
When the scheduled assignment time is reached, allow the following activity to be performed outside the maintenance window: System restart (if required to complete the installation)	An error is generated	The client does not support a system restart.
Deployment option for fast (LAN) networks: Run program from distribution point	An error is generated and the software install fails	The client cannot run software from the distribution point and instead must download the program before it can run.
Deployment option for a slow or unreliable network boundary, or a fallback source location for content: Allow clients to share content with other clients on the same subnet	Setting is ignored	The client does not support sharing content between peers.

For more information about content location, see Planning for Content Management in Configuration Manager.

For more information about how to create a deployment, see How to Deploy Packages and Programs in Configuration Manager.

Operations for Software Deployments

Similar to the Windows client, the Configuration Manager client for Linux and UNIX discovers new software deployments when it polls and checks for new policy. The frequency at which the client checks for new policy depends on client settings. You can configure maintenance windows to control when software deployments occur.

You can configure software deployments to Linux and UNIX servers by using package properties, program properties, and deployment properties.

When the client receives policy for a deployment, it submits a status message. It also submits status messages when it starts the installation of software and when the installation finishes, or fails.

Programs for software deployments run with the root credentials that the Configuration Manager client for Linux and UNIX runs with. The exit code of the programs command is used to determine success or failure. An exit code of 0 (zero) is treated as success. In addition, the stdout (standard output stream) and stderr (standard error stream) are copied to the log file when the log level is set to INFO or TRACE.

Tip
If the software that you want to deploy is located on a Network File System (NFS) share that the Linux or UNIX server can access, you do not need to use a distribution point to download the package. Instead, when you create the package, do not select the check box for This package contains source files. Then, when you configure the program, specify the appropriate command line to directly access the package on the NFS mount point.

Tip

If the software that you want to deploy is located on a Network File System (NFS) share that the Linux or UNIX server can access, you do not need to use a distribution point to download the package. Instead, when you create the package, do not select the check box for This package contains source files. Then, when you configure the program, specify the appropriate command line to directly access the package on the NFS mount point.