Community macOS workers in MacStadium need some profiles applied

[petemoore]

I opened a VNC connection to the console session of a mac stadium worker, and discovered that the login process was stuck at a confirmation screen. Typically, new versions of macOS require new profiles to be run in order to disable the user setup wizard steps.

The instructions for this are in step 2 of https://community-tc.services.mozilla.com/docs/reference/workers/generic-worker/installing#macos---multiuserinsecure-build:

Disable wizards/warning pop ups on first-login to user accounts:

• git clone https://github.com/rcurranmoz/profiles.git
• For versions of macOS prior to macOS11:
  • profiles install -path=profiles/Skip\ Setup\ Assistant.mobileconfig
• For macOS11 and higher, Apple requires installing the profile via the GUI

These macs were manually set up some time ago, it could be that the latest version of github.com/rcurranmoz/profiles already includes the necessary updates.

When stepping through the wizard, I encountered the following wizard prompts:

After stepping through them all, I also noticed a software update is available:

Summary

We should apply necessary profiles so that no wizards are launched on first log in of a new user. We can test this by creating a new user, and then logging in as this user, or alternatively by running generic worker, then connecting via VNC as the active task user (first ssh in and check the contents of /var/root/current-task-user.json).

If it turns out the installation instructions in the taskcluster repo need updating, a separate issue should be raised there too, but perhaps we just need to apply the latest profiles from github.com/rcurranmoz/profiles in which case no updated instructions would be necessary.

We also should consider updating to the latest macOS version (Sequoia 15.2) since we are currently running Ventura 13.7 (22H123).