IT setup guide

1Install and update with Installomator

Installomator's built-in valuesfromarguments label takes the app's details as arguments, so no custom build is needed. Run it from Jamf, Kandji, Mosyle, Munki or any MDM that runs scripts.

/usr/local/Installomator/Installomator.sh valuesfromarguments \
    name=Blockr \
    type=dmg \
    "downloadURL=https://api.twoplus11.com/api/v1/download/blockr?src=installomator" \
    expectedTeamID=EHBZC99ZQ5

/usr/local/Installomator/Installomator.sh valuesfromarguments \
    name=Stapl \
    type=dmg \
    "downloadURL=https://api.twoplus11.com/api/v1/download/stapl?src=installomator" \
    expectedTeamID=EHBZC99ZQ5

The download link always serves the current release, and Installomator refuses the file unless it is signed by Team ID EHBZC99ZQ5. Blockr needs macOS 14 or later; Stapl needs macOS 12 or later.

2Blockr only: approve its network extension

Blockr filters connections with a network system extension, com.twoplus11.Blockr.FilterExtension. On an unmanaged Mac the user has to approve it in System Settings, and that approval needs an administrator. Deploy this profile through your MDM to approve it in advance. It holds one System Extensions payload and nothing else, and macOS only applies it when an MDM delivers it.

Download the profile

After that, the first time Blockr runs, macOS asks once: "Blockr would like to filter network content", and the user clicks Allow. If someone turns on Blockr's encrypted DNS, macOS asks once more for that. A fully silent setup would also need a Web Content Filter payload, which this profile does not include yet.

3Licenses

Personal use is free. Business use needs one license per computer, bought once, with updates included. Buy for any number of computers, and you get one license key per app to enter on each Mac. Lost a key? License key help.