macOSmacOS系统管理

BSD vs GNU Commands

• - sed -i requires extension argument: sed -i '' 's/a/b/' file — empty string for no backup, Linux doesn't need it
• INLINECODE2 doesn't support -printf — use -exec stat or xargs with stat -f instead
• INLINECODE7 uses different format flags: date -j -f '%Y-%m-%d' '2024-01-15' '+%s' — -j prevents setting time
• INLINECODE10 (Perl regex) doesn't exist — use grep -E (extended) or install ggrep via Homebrew
• INLINECODE13 defaults to /usr/bin/echo not the command — always specify the command explicitly
• INLINECODE15 doesn't exist — use realpath or INLINECODE17

Homebrew Paths

• - Apple Silicon: /opt/homebrew/bin, INLINECODE19
• Intel: /usr/local/bin, INLINECODE21
• Check architecture: uname -m returns arm64 or INLINECODE24
• Homebrew doesn't add to PATH automatically — check ~/.zprofile for eval line
• Running x86 binaries: arch -x86_64 /bin/bash then install/run Intel-only tools

Keychain (Secrets)

• - Store: INLINECODE27
• Retrieve: INLINECODE28
• INLINECODE29 flag updates if exists — without it, duplicate entries error
• Keychain prompts for access on first use — authorize permanently for automation
• Delete: INLINECODE30

launchd (Services)

• - User agents: ~/Library/LaunchAgents/ — runs as user when logged in
• System daemons: /Library/LaunchDaemons/ — runs at boot as root
• Load: INLINECODE33
• Unload before editing: launchctl unload — edits to loaded plists are ignored
• Check errors: launchctl list | grep service_name then INLINECODE36
• Logs: INLINECODE37

Privacy Permissions (TCC)

• - Automation scripts fail silently without Full Disk Access or Automation permissions
• Grant in System Settings → Privacy & Security → corresponding category
• Terminal and iTerm need separate permissions — granting to one doesn't grant to other
• INLINECODE38 clears permissions: tccutil reset AppleEvents for Automation
• Check granted permissions: INLINECODE40

defaults (Preferences)

• - Read: INLINECODE41
• Write: INLINECODE42
• Delete: INLINECODE43
• Restart app after changing: INLINECODE44
• Find app bundle ID: INLINECODE45
• Export all: defaults export com.apple.finder - outputs XML

File Operations

• - ditto preserves resource forks and metadata — use instead of cp for app bundles
• Create DMG: INLINECODE49
• Mount DMG: hdiutil attach image.dmg — returns mount point path
• Unmount: INLINECODE51
• Extended attributes: xattr -l file to list, xattr -c file to clear all
• Quarantine removal: INLINECODE54

Clipboard

• - Copy to clipboard: INLINECODE55
• Paste from clipboard: INLINECODE56
• Copy file contents: INLINECODE57
• Preserve RTF: INLINECODE58
• Clipboard works in SSH sessions to local machine — useful for remote file copying

Screenshots and Screen

• - Screenshot region to file: INLINECODE59
• Screenshot window: INLINECODE60
• Screenshot to clipboard: INLINECODE61
• Headless (no UI): screencapture -x — suppresses sound and cursor
• Screen recording requires Screen Recording permission in Privacy settings

Process Management

• - Prevent sleep: caffeinate -i command — keeps system awake while command runs
• Prevent sleep with timeout: caffeinate -t 3600 — 1 hour
• Check why not sleeping: INLINECODE65
• Power settings: pmset -g to view, sudo pmset -a sleep 0 to disable sleep
• Current app in focus: INLINECODE68

Network

• - List interfaces: INLINECODE69
• Get IP: ipconfig getifaddr en0 (Wi-Fi usually en0 on laptops)
• DNS servers: INLINECODE71
• Flush DNS: INLINECODE72
• Proxy settings: INLINECODE73

System Integrity Protection

• - Check status: INLINECODE74
• Disable (Recovery Mode only): csrutil disable — not recommended for production
• Protected paths: /System, /usr (except /usr/local), /sbin, INLINECODE80
• Can't modify these even as root — design your automations around this

Logs

• - Stream live: INLINECODE81
• Search recent: INLINECODE82
• Subsystem filter: INLINECODE83
• Save to file: log collect --output ./logs.logarchive — opens in Console.app

Automation Tips

• - Open URL: open "https://example.com" — uses default browser
• Open app: open -a "Safari" — by name, not path
• Open file with specific app: INLINECODE87
• Run AppleScript: INLINECODE88
• Spotlight search: mdfind "kMDItemDisplayName == 'filename.txt'" — faster than find for indexed files