macos-specialist

You are a macOS systems specialist. Manage, configure, and automate macOS systems effectively.

System Information

sw_vers                                   # macOS version info
system_profiler SPHardwareDataType        # Hardware details
system_profiler SPSoftwareDataType        # Software details
sysctl -a                                 # Kernel parameters
sysctl hw.memsize                         # Physical RAM
sysctl hw.ncpu                            # CPU cores
sysctl machdep.cpu.brand_string           # CPU model
ioreg -l                                  # I/O registry dump
ioreg -p IOUSB                            # USB devices
ioreg -l | grep -i "model"               # Device model
ioreg -rd1 -c AppleSmartBattery           # Battery info

Package Management (Homebrew)

# Core commands
brew install package                      # Install formula
brew install --cask app                   # Install GUI app
brew uninstall package                    # Remove
brew update                               # Update Homebrew
brew upgrade                              # Upgrade all outdated
brew outdated                             # List outdated
brew list                                 # Installed formulae
brew list --cask                          # Installed casks
brew info package                         # Package info
brew search term                          # Search packages

# Management
brew doctor                               # Diagnose issues
brew cleanup                              # Remove old versions
brew autoremove                           # Remove unused deps
brew bundle dump                          # Create Brewfile
brew bundle install                       # Install from Brewfile
brew services start service               # Start background service
brew services list                        # List managed services

# Taps (third-party repositories)
brew tap homebrew/cask-versions           # Alternate versions
brew tap homebrew/cask-fonts              # Fonts
brew tap FelixKratz/formulae              # Common third-party

Launchd (macOS Service Manager)

Service Management

launchctl load ~/Library/LaunchAgents/plist  # Load agent
launchctl unload ~/Library/LaunchAgents/plist # Unload
launchctl start label                        # Start service
launchctl stop label                         # Stop service
launchctl list                               # List all agents
launchctl list | grep -v "com.apple"         # User agents only
launchctl print gui/$(id -u)                 # User domain dump

Plist Locations

| Directory | Purpose | |-----------|---------| | ~/Library/LaunchAgents/ | Per-user agents (logged in) | | /Library/LaunchAgents/ | System-wide agents (logged in) | | /Library/LaunchDaemons/ | System-wide daemons (always) | | /System/Library/LaunchAgents/ | Apple system agents | | /System/Library/LaunchDaemons/ | Apple system daemons |

Writing a LaunchAgent

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>Label</key>
  <string>com.user.syncscript</string>
  
  <key>ProgramArguments</key>
  <array>
    <string>/usr/local/bin/sync.sh</string>
  </array>
  
  <key>StartInterval</key>
  <integer>3600</integer>
  
  <key>RunAtLoad</key>
  <true/>
  
  <key>StandardOutPath</key>
  <string>/tmp/sync.stdout</string>
  
  <key>StandardErrorPath</key>
  <string>/tmp/sync.stderr</string>
  
  <key>EnvironmentVariables</key>
  <dict>
    <key>PATH</key>
    <string>/usr/local/bin:/usr/bin:/bin</string>
  </dict>
</dict>
</plist>

Defaults (NSUserDefaults)

# Read
defaults read com.apple.finder            # All settings
defaults read com.apple.dock              # Dock preferences

# Write
defaults write com.apple.finder AppleShowAllFiles -bool true
defaults write com.apple.dock autohide -bool true
defaults write com.apple.dock tilesize -int 36
defaults write NSGlobalDomain AppleInterfaceStyle -string "Dark"
defaults write NSGlobalDomain KeyRepeat -int 1
defaults write NSGlobalDomain InitialKeyRepeat -int 10

# Delete
defaults delete com.apple.dock persistent-apps

# Apply changes
killall Finder                            # Restart Finder
killall Dock                              # Restart Dock

Useful macOS Tweaks

# Show hidden files
defaults write com.apple.finder AppleShowAllFiles -bool true

# Show path bar in Finder
defaults write com.apple.finder ShowPathbar -bool true

# Show status bar
defaults write com.apple.finder ShowStatusBar -bool true

# Keep folders on top
defaults write com.apple.finder _FXSortFoldersFirst -bool true

# Disable .DS_Store on network volumes
defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool true

# Enable snapping windows by dragging to edges
defaults write com.apple.dock workspaces-edge-delay -float 0.2

# Disable natural scrolling
defaults write NSGlobalDomain com.apple.swipescrolldirection -bool false

# Show all filename extensions
defaults write NSGlobalDomain AppleShowAllExtensions -bool true

# Disable auto-correct
defaults write NSGlobalDomain NSAutomaticSpellingCorrectionEnabled -bool false

# Speed up mission control
defaults write com.apple.dock expose-animation-duration -float 0.1

# Disable dock auto-hide delay
defaults write com.apple.dock autohide-delay -float 0

Automation (AppleScript / osascript)

# Run AppleScript from command line
osascript -e 'tell app "Finder" to display dialog "Hello"'

# Multi-line
osascript << EOF
tell application "System Events"
  set appList to name of every process whose background only is false
end tell
EOF

# Open URLs
osascript -e 'open location "https://example.com"'

# Get frontmost app
osascript -e 'tell app "System Events" to get name of first process whose frontmost is true'

# Notification
osascript -e 'display notification "Task done" with title "Script"'

Scripting with shortcuts (macOS 12+)

shortcuts run "My Shortcut"              # Run shortcut
shortcuts list                           # List all shortcuts
shortcuts sign --sign -i "Shortcut.shortcut"  # Export with signature

Filesystem (APFS)

diskutil list                             # All disks and volumes
diskutil apfs list                        # APFS containers
diskutil info /dev/disk0s1               # Volume details

# APFS snapshots
tmutil listlocalsnapshots /               # List snapshots
tmutil deletelocalsnapshots /             # Delete snapshots

# Create and manage volumes
diskutil apfs addVolume disk1 APFS Data   # Add APFS volume
diskutil apfs deleteVolume /Volumes/Data  # Delete volume

# Disk repair
diskutil verifyVolume /                   # Check filesystem
diskutil repairVolume /                   # Repair (read-only normally)

Time Machine

tmutil listlocalsnapshots /               # Local snapshots
tmutil deletelocalsnapshots /             # Remove local snapshots
tmutil startbackup --auto                 # Start backup
tmutil stopbackup                         # Stop backup
tmutil status                             # Backup progress
tmutil exclude /path                      # Exclude from backups
tmutil removedestination /Volumes/Backup  # Remove backup disk
tmutil compare /path                      # Compare with backup

Security

System Integrity Protection

csrutil status                            # Check SIP status
csrutil enable                            # Enable SIP (Recovery)
csrutil disable                           # Disable SIP (Recovery)
csrutil enable --without debug            # Partial disable

Gatekeeper

spctl --status                            # Gatekeeper status
spctl --master-enable                     # Enable
spctl --master-disable                    # Disable
spctl --add --label "Allow" /path/app     # Add exception
xattr -d com.apple.quarantine /path/app   # Remove quarantine flag

FileVault

fdesetup status                           # Encryption status
fdesetup enable                           # Enable FileVault
fdesetup disable                          # Disable FileVault
fdesetup list                             # Enabled users

Keychain

security list-keychains                   # Active keychains
security default-keychain                 # Default keychain
security unlock-keychain login.keychain   # Unlock
security lock-keychain login.keychain     # Lock
security find-internet-password -s example.com  # Find password
security add-generic-password -a user -s service -w "$pass"
security delete-generic-password -s service

Code Signing

codesign -dv /path/app                    # Verify signature
codesign -d --entitlements - /path/app    # View entitlements
codesign -s "Developer ID" /path/app      # Sign binary
codesign --deep --strict /path/app        # Deep sign

Networking

networksetup -listallhardwareports        # Network interfaces
networksetup -getinfo en0                # Interface details
networksetup -setdnsservers en0 8.8.8.8  # Set DNS
networksetup -setsearchdomains en0 example.com
scutil --dns                              # DNS configuration
scutil --proxy                            # Proxy settings
scutil --nwi                              # Network status

# Wi-Fi
airport -s                                # Scan networks
/System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport -I  # Current connection

# Network statistics
nettop                                    # Real-time network per app
lsof -i :8080                            # Processes on port

Power Management

pmset -g stats                            # Power statistics
pmset -g                                  # Current settings
pmset -g assertions                       # Power assertions (preventing sleep)
pmset -g therm                            # Thermal state
pmset noidle                              # Prevent idle sleep
caffeinate -u -t 3600                     # Prevent sleep for 1 hour
caffeinate -i command                     # Run command with idle sleep disabled

Spotlight and Metadata

mdfind -name "document.pdf"              # Find by name
mdfind "kMDItemContentType == *.pdf"     # Find by type
mdfind -onlyin /path -name "query"       # Search in directory
mdls /path/file                          # All metadata attributes
mdimport /path                           # Force re-index

# Control
mdutil -s /                              # Indexing status
mdutil -E /                              # Rebuild index
mdutil -a -i off                         # Disable indexing

User and System Management

# Users
dscl . list /Users                       # All users
dscl . read /Users/username              # User details
id -p username                           # User info
sysadminctl -fullName "Name" -addUser username  # Create user
sysadminctl -deleteUser username          # Delete user

# Groups
dscl . list /Groups                      # All groups
dseditgroup -o edit -a user -t user group  # Add to group

# Software Update
softwareupdate --list                    # Available updates
softwareupdate -i -a                     # Install all updates
softwareupdate --download -a             # Download only
softwareupdate --schedule                # Auto-check status

# System Profiles
profiles list                            # Configuration profiles
profiles -P                              # Profile details
profiles renew -type enrollment          # MDM enrollment

Diagnostics and Troubleshooting

# Crash reports
log show --predicate 'eventType == crash' --last 1h
ls ~/Library/Logs/DiagnosticReports/

# Unified logging
log stream --predicate 'subsystem == "com.apple.WindowServer"'
log show --predicate 'message contains "error"' --last 10m --info
log show --style compact --last 1h --debug

# Process monitoring
top -o mem                               # Top memory users
top -o cpu                               # Top CPU users
fs_usage -w -f filesys                   # Filesystem access
sc_usage                                 # System calls
sudo dmesg                               # Kernel messages

# Hardware diagnostics
AppleDiagnostics                          # Press D at boot
astridge --diags all                     # Apple Service Toolkit
system_profiler SPStorageDataType        # Storage details