Woodstar
Self-hosted macOS management for the gaps Intune leaves. It provides:
- Managed software through Munki.
- Execution rules and events through Santa.
- Inventory, reports, policies, remediation, and live queries through osquery.
- Host enrollment through Orbit or osquery.
Clients
| Client | What the client uses the server for |
|---|---|
| Orbit | Enrollment, basic host details, and remediation execution |
| osquery | Inventory, reports, policies, labels, and live queries |
| Santa | Client configuration, rules, and execution events |
| Munki | Software assignments, repository data, and package downloads |
Orbit and osquery can enroll a Mac. Santa and Munki connect to an existing host using its hardware identity.
Labels group hosts. The same labels can scope osquery work, Santa policy, and Munki software.
The server implements the Fleet-compatible endpoints used by Orbit and osquery. Santa and Munki use their own native protocols.
Documentation
- Getting Started runs the server with Docker Compose.
- Concepts explains hosts, labels, accounts, and agent credentials.
- Using the app covers the main areas of the web app.
- Agent Protocols documents client configuration and routes.
- Stemma covers publishing software from a Stemma catalog with the Woodstar plugin.
- Configuration lists server settings.
- Development covers a source checkout and repository commands.
- API Reference documents the JSON API used by the web app and scripts.