This playbook installs and configures most of the software I use on my Mac for web and software development. Some things in macOS are slightly difficult to automate, so I still have a few manual installation steps, but at least it's all documented here.

1. Ensure Apple's command line tools are installed (xcode-select --install to launch the installer).

2. Install Ansible:

   1. Run the following command to add Python 3 to your $PATH: export PATH="$HOME/Library/Python/$(python3 --version | cut -d' ' -f2 | cut -d'.' -f1,2)/bin:/opt/homebrew/bin:$PATH"
   2. Upgrade Pip: sudo pip3 install --upgrade pip
   3. Install Ansible: pip3 install ansible

3. Clone or download this repository to your local drive.

4. IMPORTANT: Install required Ansible roles and collections:

   cd mac-dev-playbook
   ansible-galaxy install -r requirements.yml

   This step is required before running the playbook. It installs necessary roles like elliotweiser.osx-command-line-tools and collections.

5. Run the playbook:

   ansible-playbook main.yml --ask-become-pass

   Enter your macOS account password when prompted for the 'BECOME' password.

6. After setup completes, run the health check: ./scripts/healthcheck.sh

Note: If some Homebrew commands fail, you might need to agree to Xcode's license or fix some other Brew issue. Run brew doctor to see if this is the case.

You can use this playbook to manage other Macs as well; the playbook doesn't even need to be run from a Mac at all! If you want to manage a remote Mac, either another Mac on your network, or a hosted Mac like the ones from MacStadium, you just need to make sure you can connect to it with SSH:

1. (On the Mac you want to connect to:) Go to System Settings > Sharing.
2. Enable 'Remote Login'.

You can also enable remote login on the command line:

sudo systemsetup -setremotelogin on

Then edit the inventory file in this repository and change the line that starts with 127.0.0.1 to:

[ip address or hostname of mac]  ansible_user=[mac ssh username]

If you need to supply an SSH password (if you don't use SSH keys), make sure to pass the --ask-pass parameter to the ansible-playbook command.

You can filter which part of the provisioning process to run by specifying a set of tags using ansible-playbook's --tags flag. Available tags include:

• dotfiles - Configure dotfiles
• homebrew - Install Homebrew packages and casks
• mas - Install Mac App Store apps
• extra-packages - Install additional packages (npm, pip, gem, composer)
• osx - Configure macOS system settings
• dev-environment - Set up development environment (Git, SSH, shell completions)
• macos-settings - Apply corporate security and productivity settings

Example:

ansible-playbook main.yml -K --tags "dotfiles,homebrew"
ansible-playbook main.yml -K --tags "dev-environment"

Not everyone's development environment and preferred software configuration is the same.

You can override any of the defaults configured in default.config.yml by creating a config.yml file and setting the overrides in that file. For example, you can customize the installed packages and apps with something like:

homebrew_installed_packages:
  - cowsay
  - git
  - go

mas_installed_apps:
  - { id: 443987910, name: "1Password" }
  - { id: 498486288, name: "Quick Resizer" }
  - { id: 557168941, name: "Tweetbot" }
  - { id: 497799835, name: "Xcode" }

composer_packages:
  - name: hirak/prestissimo
  - name: drush/drush
    version: '^8.1'

gem_packages:
  - name: bundler
    state: latest

npm_packages:
  - name: webpack

pip_packages:
  - name: mkdocs

configure_dock: true
dockitems_remove:
  - Launchpad
  - TV
dockitems_persist:
  - name: "Sublime Text"
    path: "/Applications/Sublime Text.app/"
    pos: 5

Any variable can be overridden in config.yml; see the supporting roles' documentation for a complete list of available variables.

Applications (installed with Homebrew Cask):

• ChromeDriver
• Docker
• Dropbox
• Firefox
• Google Chrome
• Handbrake
• Homebrew
• LICEcap
• nvALT
• Sequel Ace (MySQL client)
• Slack
• Sublime Text
• Transmit (S/FTP client)

Packages (installed with Homebrew):

• autoconf
• bash-completion
• doxygen
• gettext
• gifsicle
• git
• github/gh/gh
• go
• gpg
• httpie
• iperf
• libevent
• sqlite
• mcrypt
• nmap
• node
• nvm
• php
• ssh-copy-id
• cowsay
• readline
• openssl
• pv
• wget
• wrk
• zsh-history-substring-search

My dotfiles are also installed into the current user's home directory, including the .osx dotfile for configuring many aspects of macOS for better performance and ease of use. You can disable dotfiles management by setting configure_dotfiles: no in your configuration.

Finally, there are a few other preferences and settings added on for various apps and services.

This fork includes several corporate-focused enhancements:

• bat - Syntax-highlighted cat replacement
• eza - Modern ls with git integration
• fzf - Fuzzy finder for files and history
• zoxide - Smarter cd that learns your habits
• git-delta - Better git diff viewer
• direnv - Auto-load environment variables per directory
• jless - JSON viewer
• tldr - Simplified man pages

• age - Modern file encryption
• gnupg - Full GPG suite
• Automated SSH key setup guidance
• Git credential helper configuration

• mtr - Network diagnostic tool
• iperf3 - Network performance testing
• speedtest-cli - Internet speed testing
• Cloudflare WARP - Secure VPN

• shellcheck - Shell script linter
• yamllint - YAML linter
• hadolint - Dockerfile linter
• actionlint - GitHub Actions workflow linter

• Rectangle - Window management
• Fira Code Nerd Font - Developer font with ligatures
• JetBrains Mono Nerd Font - Alternative developer font

• Git Configuration Template - Corporate-ready git config in templates/gitconfig-corporate
• Health Check Script - Verify your installation with ./scripts/healthcheck.sh
• Troubleshooting Guide - Common issues and solutions in TROUBLESHOOTING.md

• Creates common development directories (~/Development, ~/Projects)
• Installs and configures Oh My Zsh
• Sets up SSH config template
• Configures shell completions for kubectl, terraform, AWS CLI
• Applies corporate security settings (screen lock, password requirements)
• Optimizes Finder and keyboard settings

Since I've used this playbook to set up something like 20 different Macs, I decided to write up a full 100% from-scratch install for my own reference (everyone's particular install will be slightly different).

You can see my full from-scratch setup document here: full-mac-setup.md.

Many people have asked me if I often wipe my entire workstation and start from scratch just to test changes to the playbook. Nope! This project is continuously tested on GitHub Actions' macOS infrastructure.

You can also run macOS itself inside a VM, for at least some of the required testing (App Store apps and some proprietary software might not install properly). I currently recommend:

• UTM
• Tart

Check out Ansible for DevOps, which teaches you how to automate almost anything with Ansible.

This project was created by Jeff Geerling (originally inspired by MWGriffin/ansible-playbooks).