Modern macOS package manager with MDM integration.
carrus
(Latin: wagon/carrier) is a modern, maintainable package manager for macOS, designed with MDM integration in mind. It provides robust package management with a focus on security, verification, and automation.
- 🔒 Built-in code signing verification
- 📦 Modern package management
- 🤖 MDM integration (Kandji support)
- 🔄 Automatic updates
- 🏗️ Custom package building
- ✅ Comprehensive verification
carrus is currently under development, and so is expected to be buggy. It's suggested install directly from source until further notice;
# Clone the repository
git clone https://github.com/matdotcx/carrus.git
cd carrus
# Create and activate a virtual environment (recommended)
python3 -m venv venv
source venv/bin/activate
# Install in development mode
pip install -e .
- Create a manifest (firefox.yaml):
name: Firefox
version: "123.0"
type: "firefox"
url: "https://download-installer.cdn.mozilla.net/pub/firefox/releases/123.0/mac/en-US/Firefox%20123.0.dmg"
filename: "Firefox-123.0.dmg"
code_sign:
team_id: "43AQ936H96"
require_notarized: true
build:
type: "app_dmg"
destination: "/Applications"
- Download and verify:
carrus download firefox.yaml
- Build for MDM:
carrus build-mdm firefox.yaml