Running on a Mac mini¶
Any Apple Silicon Mac works. A Mac mini on the AV office network is the usual choice.
Give Fleetwatch its own macOS user. The sign-in token lives in that user's login Keychain, and any program running
as the same user can read it without a prompt. Create a standard (not admin) user in System Settings > Users &
Groups, log in as that user, and run the steps below there. fleetwatch doctor shows a Keychain access line as a
reminder.
uv sync && uv run fleetwatch connect
deploy/install.sh
The installer writes a launchd agent to ~/Library/LaunchAgents/dev.fleetwatch.agent.plist. It starts at login
and restarts after a failure.
| Task | Command |
|---|---|
| Logs | tail -f ~/.fleetwatch/agent.log |
| Stop | launchctl bootout gui/$(id -u)/dev.fleetwatch.agent |
| Start again | deploy/install.sh |
Something not working? Run uv run fleetwatch doctor in the Fleetwatch folder first. It checks the policy, the
read-only guard, redaction, the sign-in, the network route to Epiphan, and the launchd agent.
A launchd agent runs while that user is logged in. For an unattended Mac mini, turn on automatic login for the account that runs Fleetwatch, and stop the Mac from sleeping.