Iru provider sample

These scripts deploy the Watcher client to managed Macs. The audit script checks whether Watcher needs to be installed or repaired, and the remediation script performs that work for the logged-in user.

See MDM rollout for start-on-login, proxy headers, and managed settings.

The remediation script targets a self-hosted Watcher deployment. Set its Watcher URL and port for yours; the client takes the deployment's sign-in mode from the backend, so the script selects nothing about authentication. On a header-proxy deployment, add the machine's WATCHER_HEADER_* variables to the installer invocation (see MDM rollout). Test the scripts on a small device group before wider deployment.

Scripts

• audit-macos.sh checks the installation, hooks, login agent, and local service health. A non-zero exit tells Iru to run remediation.
• remediate-macos.sh installs Watcher when absent, repairs hooks, and configures the client to start on login. Set the Watcher URL in the remediation script; the client follows the server version automatically.
• uninstall-macos.sh removes the client while preserving the user's Watcher data by default. Remove the audit-and-remediate assignment before running it, or the next audit can reinstall the client.

Configure Iru

Create a Custom Script Library Item. Add audit-macos.sh as the Audit Script and remediate-macos.sh as the Remediation Script, then configure its frequency and Blueprint scope.