Gorilla

Munki-like Application Management for Windows

Overview

Gorilla is intended to provide application management on Windows using Munki as inspiration. Gorilla supports .msi, .ps1, or .nupkg (via chocolatey).

All files can be served from any standard web server with a directory stucture like this:

[web root]
├── manifests
│   ├── *.yaml
├── catalogs
│   ├── *.yaml
└── packages
    ├── *.nupkg
    ├── *.msi
    └── *.exe

Config

The configuration file is in yaml format and defaults to %ProgramData%/gorilla/config.yaml, but alternatively may be passed like this: gorilla.exe -config <path to config>.

---
url: https://YourWebServer/gorilla/
manifest: example
catalog: production
cachepath: C:/gorilla/cache
authuser: GorillaRepoUser
authpass: pizzaisyummy
tls_auth: true
tls_client_cert: c:/certs/client.pem
tls_client_key: c:/certs/client.key
tls_server_cert: c:/certs/server.pem

Required Keys

url is the path on your server that contains the directories for manifests, catalogs, and packages.
manifest is the primary manifest that is assigned to this machine.
catalog is the catalog that is assigned to this machine.

Optional Keys

cachepath is Gorilla's working directory, and may store copies of manifests, catalogs, or packages. If cachepath is not provided, it will default to %ProgramData%/gorilla/cache.

Basic Auth

auth_user is an optional username for http basic auth.
auth_pass is an option password for http basic auth.

TLS Auth

tls_auth must be true if you are using TLS mutual authentication.
tls_client_cert is the absolute path to your client certificate in PEM format.
tls_client_key is the absolute path to your client private key in PEM format.
tls_server_cert is the absolute path to your server's CA cert in PEM format.

Manifests

A manifest can include managed_installs, managed_uninstalls, managed_updates, or additional manifests. Manifests are in yaml format and must include the name of the manifest:

---
name: example
managed_installs:
  - GoogleChrome
  - Slack
managed_uninstalls:
  - Firefox
managed_updates:
  - Jre8
included_manifests:
  - printers
  - internal

Catalogs

A catalog contains details on all available packages. Catalogs are in yaml format with each package reperesented by the package name with a nested object containing the package details:

---
GoogleChrome:
  display_name: Google Chrome
  installer_item_location: packages/google-chrome/GoogleChrome.68.0.3440.106.nupkg
  installer_item_hash: ce9c44417489d6c1f205422a4b9e8d5181d1ac24b6dcae3bd68ec315efdeb18b
  version: 68.0.3440.106

ColorPrinter:
  display_name: Color Printer
  installer_item_hash: a8b4ff8bc7d77036644c1ed04713c550550f180e08da786fbca784818b918dac
  installer_item_location: packages/colorprinter.1.0.nupkg
  version: 1.0
  dependencies: Canon-Drivers

CanonDrivers:
  display_name: Canon Printer Drivers
  installer_item_hash: ca784818b91850f180e08da786ac1ed04713c5a8b4ff8bc7d77036644dac505aec
  installer_item_location: packages/Canon-Drivers.1.0.nupkg
  version: 1.0

Chocolatey:
  display_name: Chocolatey
  install_check_path: C:\ProgramData\chocolatey\bin\choco.exe
  installer_item_location: packages/chocolatey/chocolateyInstall.ps1
  installer_item_hash: 38cf17a230dbe53efc49f63bbc9931296b5cea84f45ac6528ce60767fe370230
  version: 1.0

ChefClient:
  display_name: Chef Client
  install_check_script: |
    $latest = "14.3.37"
    $current = C:\opscode\chef\bin\chef-client.bat --version
    $current = $current.Split(" ")[1]
    $upToDate = [System.Version]$current -ge [System.Version]$latest
    If ($upToDate) {
      exit 1
    } Else {
      exit 0
    }
  installer_item_location: packages/chef-client/chef-client-14.3.37-1-x64.msi
  installer_item_hash: f5ef8c31898592824751ec2252fe317c0f667db25ac40452710c8ccf35a1b28d
  version: 14.3.37
  uninstall_method: msi

vlc:
  display_name: VLC
  install_check_path: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
  installer_item_location: packages/apps/vlc/vlc-3.0.3-win32.exe
  installer_item_hash: 65bf42b15a05b13197e4dd6cdf181e39f30d47feb2cb6cc929db21cd634cd36f
  installer_item_arguments: 
     - /L=1033
     - /S
  version: 3.0.3

display_name should be a human-readable name, and match the Display name of registry items.
install_check_path is a path to a file that must exist for the item to be considered installed. If this option is not provided, Gorilla will default to using the registry.
install_check_script is a PowerShell code block that will be executed to determine if the package should be installed. Any non-zero exit code will be considered installed. If this option is not provided, Gorilla will default to using the registry.
installer_item_arguments is an optional list of arguments to pass to the installer. Currently only supported by exe installers.
installer_item_hash is required and should be a sha256 hash of the file located at installer_item_location.
installer_item_location is required and should be the path to the package, relative to the url provided in the configuration file.
version is compared to the currently installed version to determine if it needs to be installed.
dependencies is an optional array of package names that should be installed before this package.

jaredsiegel / gorilla