MacOS Task Worker Installer - Deployment Guide

Component: Diskover Worker (macOS)
Deployment Method: DMG Installer
Platform: macOS
Version: 2.6.0+

ℹ️ This guide covers the reworked 2.6.0+ installer: guided setup dialogs with a live credential check, fully offline dependency install, and a Python 3.13 virtualenv. Older 2.4.x–2.5.x DMG installers require manual configuration steps that 2.6.0 automates — contact the Diskover team if you are deploying an older installer.

Overview

The Mac DMG Installer provides a packaged installer for deploying the Diskover worker (diskoverd) on macOS machines. This allows macOS hosts to act as task workers, running scans and reporting back to the Diskover Web UI.

Use this guide when adding a macOS machine as a Diskover worker node alongside your existing Diskover infrastructure (Elasticsearch, Diskover Web, RabbitMQ).

Dependencies:

• A running Diskover Web instance (the worker connects via API on port 8000)

• A running Elasticsearch instance (the worker fetches its ES connection config from Diskover Admin)

Prerequisites

Installation — Fresh Install

1. Double click the Diskover-v2.x.x.dmg file the Diskover team has provided.

2. Inside this, you will see a Diskover-indexer.pkg file — double click this. This will start the installer.

3. Proceed through the installer modal instructions, agree to the Software License Agreement, and click Install when ready.

Note: This will require Admin privileges to install.

Tip: Pressing Cmd + L will bring up the Installer Log. From here, changing "Show Errors Only" to "Show All Logs" will allow you to see what the installer is working on, and any present errors.

4. During installation the installer presents setup dialogs. Have your values ready:

   • Server address — the Diskover Web host (HTTP or HTTPS; common typos are repaired automatically)

   • API user and password — the Diskover API user this worker connects as

   • Internal API key — the DISKOVER_INTERNAL_API_KEY value from your Diskover server

   You then get a review/confirm step, and the installer runs a live credential check against the server before anything is written. On success it writes the configuration and starts the worker service automatically — no manual YAML editing or launchctl commands needed. Values are pre-filled from any previous install.

5. Once the installer has finished, you should now have the following installed onto this Mac machine:

   • /opt/diskover/

   • /var/root/.config/diskoverd/config.yaml (also mirrored to the console user's ~/.config/diskoverd/)

   • /Library/LaunchDaemons/com.diskoverdata.diskoverd.plist

   • /opt/python-venv-diskover/ (Python 3.13 virtualenv the worker runs from)

   • /opt/diskover/configure-worker.sh (reconfigure + service management tool)

6. If you skipped the dialogs, installed headless, or need to adjust your configurations afterwards, leverage the included configure-worker.sh:

   shell sudo /opt/diskover/configure-worker.sh

7. The worker should have started automatically at the end of the installer — tail the logs to verify:

   shell tail -n 50 -f /opt/diskover/logs/diskoverd.std*

   You should see the following if your worker has started up properly:

   diskoverd - INFO - Worker name: $YourMacHostname diskoverd - INFO - Worker pools: []

Configuration

Diskover Admin — Diskoverd Settings

8. Navigate to your Diskover Admin UI:

   • Under Configuration → Diskoverd, you should see your Mac's hostname. Click on this host to edit the settings.

Note: If your Mac hostname is not showing, please review your logs to ensure the service has started up properly.

• Expand the Logger section. Check the Enable Log File box

• For Log Directory, change the location to /opt/diskover/logs/

• Change your Timezone

• Python Command is pre-set by the installer to /opt/python-venv-diskover/bin/python3 — verify it, but do not change it to a system Python

• Save these changes

Running Your First Scan

9. Navigate to the Task List page within Diskover Web to create a task for your Mac worker.

Important: While configuring the task object, when you get to Assigned Worker, please be sure to select from the dropdown your Mac host. Otherwise, your task will not run on the correct host.

Note (macOS privacy): Scanning locations protected by macOS (Desktop, Documents, Downloads) requires granting Full Disk Access to /opt/python-venv-diskover/bin/python3 under System Settings → Privacy & Security.

OVA Elasticsearch Connection

If you are connecting this back to a single stack OVA that likely has the Diskoverd configuration for the Elasticsearch connection set to localhost, you will need to change that to the OVA's IPv4 address so that the Mac Task Worker can fetch that configuration for ES and be able to connect properly.

Build Directories

The DMG will install into the following directories:

Service Management

The installed configure-worker.sh tool is the easiest way to manage the worker (all commands as root/sudo):

Equivalent raw launchctl commands:

Note: These commands must be run as the root user or with sudo privileges.

Manual Scan:

sudo /opt/diskover/configure-worker.sh run -i diskover-$indexName /path/to/be/scanned

or directly with the venv Python (the internal API key is picked up automatically from the LaunchDaemon plist):

sudo /opt/python-venv-diskover/bin/python3 /opt/diskover/diskover.py -i diskover-$indexName /path/to/be/scanned

Note: ALL indexes must start with diskover-.

Verification

Troubleshooting

HTTPS: Trusting Your SSL Certificate

If your Diskover Web server runs HTTPS with a certificate the Mac worker's Python runtime doesn't trust (e.g. an internal CA), the worker fails its API calls even though configure-worker.sh check reports a successful connection. The fix is Step 4 of the Diskover - SSL Configuration Guide applied with Mac paths:

1. Locate the worker's Python CA bundle:

   sudo /opt/python-venv-diskover/bin/python3 -c "import requests; print(requests.certs.where())"

   On the Mac worker this returns a path like /opt/python-venv-diskover/lib/python3.13/site-packages/certifi/cacert.pem — use the exact path returned in the steps below.

2. Back up the bundle, then append your certificate chain (the same diskover-chain.crt from the SSL Configuration Guide):

   sudo cp /opt/python-venv-diskover/lib/python3.13/site-packages/certifi/cacert.pem \ /opt/python-venv-diskover/lib/python3.13/site-packages/certifi/cacert.pem.bak cat diskover-chain.crt | sudo tee -a /opt/python-venv-diskover/lib/python3.13/site-packages/certifi/cacert.pem > /dev/null

3. Restart the worker:

   sudo /opt/diskover/configure-worker.sh restart worker

4. Verify Python now trusts the server (expect 200):

   sudo /opt/python-venv-diskover/bin/python3 -c "import requests; print(requests.get('https://diskover.yourcompany.com/api.php').status_code)"

Important: reinstalling or upgrading the DMG recreates the Python virtualenv from scratch, which discards this change — re-apply this step after any reinstall or upgrade.

Log File Locations

Support

• https://support.diskoverdata.com

• https://support.diskoverdata.com/hc/en-us