mac/docs/manual-checklist.md

Manual checklist — GUI-only steps on macOS 26 Tahoe

Do these once, in order, after scripts/run.sh has completed. Tick and date.

Apply the shell-level changes

• Log out / log in once (key repeat, press-and-hold, scroll direction only fully apply to a fresh session).

Cloud + privacy

• System Settings > [your name] > iCloud > Drive (or "Saved to iCloud" > Drive): Desktop & Documents Folders = OFF. Keep account signed in.
• System Settings > General > AirDrop & Handoff: Handoff OFF, AirDrop = Contacts Only.
• System Settings > Screen Time: App & Website Activity OFF.
• System Settings > Spotlight: untick Siri Suggestions and any web/store result types; "Help Apple Improve Search" OFF.
• System Settings > Notifications: Allow notifications when mirroring/sharing OFF (keeps popups off a projector).
• System Settings > Network: delete the stray SparkFun Pro Micro service if present (setup.sh can't — macOS refuses to remove the sole service on a PPP port). Harmless if left.

DAW Focus

• System Settings > Focus > "+" > Custom > name DAW, icon of your choice. Allowed notifications: none. "Share across devices" OFF. Toggle it from the menu-bar moon before a session.

Apps needing a first-launch grant

• Launch Rectangle once -> grant Accessibility when prompted. Set your snap keys.
• Launch kitty once. Gatekeeper prompt -> Open. Local Network prompt -> Allow (or System Settings > Privacy & Security > Local Network > kitty ON). Symptom if missed: ssh 192.168.0.x says No route to host in kitty while Terminal works — macOS 15+ returns EHOSTUNREACH to LAN IPs for apps without the grant.
• Launch Tailscale -> log in to the tailnet. Confirm tailscale status in kitty and that ssh mac from bebop resolves via MagicDNS later.
• Gitea: cat ~/.ssh/id_ed25519_homelab.pub (the interactive key; id_ed25519 is the rrsync-jailed backup key) -> https://git.sethpc.xyz/user/settings/keys -> Add Key. Then git clone git@git.sethpc.xyz:Seth/mac.git works from the Mac if you ever want to edit there.

Ableton

• ableton.com > account > download Live 12 (Suite/trial) -> install to /Applications -> authorize.
• Re-run scripts/run.sh --no-tank from steel141 so the Dock picks up Live (the script only adds it if installed).
• Live > Browser > Packs: download the Suite packs you want (they're part of the license — do not torrent them).
• Third-party packs: copy from /Volumes/tank/Downloads/Software/Milkie/ (tank automounts on access — see "tank" below) to ~/Music/Ableton/Samples/ (local disk — never run samples off SMB).
• Live > Settings > Audio: once an interface is attached, pick it, 48 kHz, buffer 128 (raise if crackle). Test with the DAW Focus on and the lid open on AC for 15 min: no sleep, no notification.

tank

• Finder > Cmd+Shift+G > /Volumes/tank (this triggers the mount; /Volumes is a hidden folder — you won't find it by browsing Macintosh HD, and /System/Volumes is something else), then drag the tank folder from the path bar / window title into the sidebar Favorites. It will NOT appear under Locations as a drive: macOS marks every automounted share nobrowse (documented in man auto_master) — the Favorite is the one-click entry, and the share mounts on first click and unmounts when idle, so leaving the LAN never hangs Finder or throws login dialogs.
• After the first reboot: mount | grep auto_smb in kitty should show the /Volumes/tank trigger. If it's gone, /Volumes got cleaned at boot — tell Claude; the fix is a synthetic.conf mountpoint instead.

Backup

• ssh mac ~/mac/scripts/backup.sh by hand once -> confirm /tank/backups/mac/Ableton appears on pve173 and ~/Library/Logs/mac-backup.log exists.