macOS Host Cleaning Checklist (Before Customer Handover)¶
This document describes the minimum cleanup steps required before handing a macOS VM to a customer (e.g., after a datacenter becomes available).
Goal¶
- Remove customer-internal files, credentials, and environment-specific network settings
- Ensure the Guest VM is safely stopped and ready to be picked up by the datacenter team
Preconditions¶
- You have console/SSH access to the Host (or equivalent)
- You have confirmed the Host will be transferred outside of our internal environment
Cleanup Steps¶
1) Stop the VM safely¶
- Stop build agent processes
- Shut down the Guest VM gracefully (do not force shutdown unless required)
Tip: Avoid leaving the Guest VM in a suspended state. Prefer a clean shutdown.
2) Remove unnecessary files from user directories¶
Delete non-required files, especially:
~/Downloads/*~/Desktop/*(if applicable)~/Documents/*(if applicable)- Any temporary archives, logs, installers, or test outputs
3) Remove local VM images (if present)¶
If there are VM image files stored on the machine, remove them:
- Any local images used only for internal testing
Customer will not use these images; they must not be shipped with the VM.
4) Delete agent credentials (mandatory)¶
Remove the file below without exception:
/etc/agent/cred.json
If multiple agent credential files exist under /etc/agent, remove all that should not be shared with the customer.
5) Empty Trash (if needed)¶
- Empty the Trash to ensure deleted files are not recoverable via UI
6) Remove static IP configuration¶
Static IP settings can break connectivity in the customer’s network.
- Remove/disable any static IP configuration
- Ensure the VM is set to use DHCP (or customer-provided networking setup)
If static IP remains, the customer may be unable to connect to their network.
Final Checks¶
- Guest VM shuts down cleanly
-
~/Downloadsand~/Homecontain no unnecessary files - No local images remain on disk
-
/etc/agent/cred.jsonis deleted - Trash is empty (if applicable)
- Static IP configuration removed (DHCP enabled)
Datacenter Handover¶
Once cleaning is complete, open a ticket to indicate:
- The host is cleaned and ready
- The host identifier (name/ID)
- Any special notes (e.g., known issues, required access method)