Seth/mac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c1558d263096d9bef4632e02b70d2b6ee4a68f35
mac/docs/manual-checklist.md
T
Mortdecai c1558d2630 feat(tank): autofs SMB mount of tank at /Volumes/tank 
scripts/tank-automount.sh (run on the Mac, password on stdin) adds a /-
direct map and root-owned /etc/auto_smb pointing at //Administrator@
192.168.0.173/tank with soft. Mounts on first access, unmounts idle, so
the laptop can leave the LAN without hung Finder or login dialogs.

Findings baked in:
- macOS automount does not create direct-map trigger dirs -> mkdir -p
- automounted fs are always nobrowse (man auto_master): shows as a
  folder, not a Locations drive -> Finder Favorite (manual-checklist)
- no-tty sudo ticket is per parent pid: sudo inside $(...) fails, so the
  idempotency check is a pipeline (sudo cmp -s -)
- SMB over NFS: Mac seth is uid 501; SMB force user=root matches /mnt/Z

Also: checklist Gitea key -> id_ed25519_homelab; the smb://.../tank
'user seth' step was wrong (no such Samba user) and is now the automount.
Wired into run.sh. Verified: mount, root-owned write, two all-[skip] reruns.
Not yet verified across a reboot (FileVault).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-15 22:24:00 -04:00

3.6 KiB
Raw Blame History

Manual checklist — GUI-only steps on macOS 26 Tahoe

Do these once, in order, after scripts/run.sh has completed. Tick and date.

Apply the shell-level changes

  • Log out / log in once (key repeat, press-and-hold, scroll direction only fully apply to a fresh session).

Cloud + privacy

  • System Settings > [your name] > iCloud > Drive (or "Saved to iCloud" > Drive): Desktop & Documents Folders = OFF. Keep account signed in.
  • System Settings > General > AirDrop & Handoff: Handoff OFF, AirDrop = Contacts Only.
  • System Settings > Screen Time: App & Website Activity OFF.
  • System Settings > Spotlight: untick Siri Suggestions and any web/store result types; "Help Apple Improve Search" OFF.
  • System Settings > Notifications: Allow notifications when mirroring/sharing OFF (keeps popups off a projector).
  • System Settings > Network: delete the stray SparkFun Pro Micro service if present (setup.sh can't — macOS refuses to remove the sole service on a PPP port). Harmless if left.

DAW Focus

  • System Settings > Focus > "+" > Custom > name DAW, icon of your choice. Allowed notifications: none. "Share across devices" OFF. Toggle it from the menu-bar moon before a session.

Apps needing a first-launch grant

  • Launch Rectangle once -> grant Accessibility when prompted. Set your snap keys.
  • Launch kitty once. Gatekeeper prompt -> Open. Local Network prompt -> Allow (or System Settings > Privacy & Security > Local Network > kitty ON). Symptom if missed: ssh 192.168.0.x says No route to host in kitty while Terminal works — macOS 15+ returns EHOSTUNREACH to LAN IPs for apps without the grant.
  • Launch Tailscale -> log in to the tailnet. Confirm tailscale status in kitty and that ssh mac from bebop resolves via MagicDNS later.
  • Gitea: cat ~/.ssh/id_ed25519_homelab.pub (the interactive key; id_ed25519 is the rrsync-jailed backup key) -> https://git.sethpc.xyz/user/settings/keys -> Add Key. Then git clone git@git.sethpc.xyz:Seth/mac.git works from the Mac if you ever want to edit there.

Ableton

  • ableton.com > account > download Live 12 (Suite/trial) -> install to /Applications -> authorize.
  • Re-run scripts/run.sh --no-tank from steel141 so the Dock picks up Live (the script only adds it if installed).
  • Live > Browser > Packs: download the Suite packs you want (they're part of the license — do not torrent them).
  • Third-party packs: copy from /Volumes/tank/Downloads/Software/Milkie/ (tank automounts on access — see "tank" below) to ~/Music/Ableton/Samples/ (local disk — never run samples off SMB).
  • Live > Settings > Audio: once an interface is attached, pick it, 48 kHz, buffer 128 (raise if crackle). Test with the DAW Focus on and the lid open on AC for 15 min: no sleep, no notification.

tank

  • Finder > Go > Go to Folder > /Volumes/tank (this triggers the mount), then drag the tank folder from the path bar / window title into the sidebar Favorites. It will NOT appear under Locations as a drive: macOS marks every automounted share nobrowse (documented in man auto_master) — the Favorite is the one-click entry, and the share mounts on first click and unmounts when idle, so leaving the LAN never hangs Finder or throws login dialogs.
  • After the first reboot: mount | grep auto_smb in kitty should show the /Volumes/tank trigger. If it's gone, /Volumes got cleaned at boot — tell Claude; the fix is a synthetic.conf mountpoint instead.

Backup

  • ssh mac ~/mac/scripts/backup.sh by hand once -> confirm /tank/backups/mac/Ableton appears on pve173 and ~/Library/Logs/mac-backup.log exists.
Reference in New Issue View Git Blame Copy Permalink