Multiple packages for a single software title in the same fleet

[allenhouchins]

• @ddribeiro: x86 vs ARM probably covers 95% of why we'd want to do this. There have been some cases where a vendor uses the same bundle ID for different apps. I think Firefox and Firefox ESR is an example of this. Fleet would prevent an admin from adding Firefox ESR to a team if Firefox has already been uploaded to it.
• customer-shackleton: Gong snippet: https://us-65885.app.gong.io/call?id=898745945744232&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A2101%2C%22to%22%3A2289%7D%5D
  • @kc9wwh: Customer performs staged rollouts in phases (~30 hosts > ~100 > ~300 > org-wide) and needs to deploy different versions of the same package to different user groups simultaneously. The current workaround of creating 3-4 separate teams per deployment ring becomes difficult to maintain and makes managing staggered rollouts unnecessarily complex and messy.
• customer-cisneros: Gong snippet: https://us-65885.app.gong.io/call?id=6065255196915724079&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A1483%2C%22to%22%3A1608%7D%5D
• customer-numa Gong snippet:
  • https://us-65885.app.gong.io/call?id=7003291854589194401&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A528%2C%22to%22%3A569%7D%5D
  • https://us-65885.app.gong.io/call?id=7003291854589194401&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A983%2C%22to%22%3A1007%7D%5D
• customer-gispen Gong snippet: https://us-65885.app.gong.io/call?id=7975473241084299217&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A1124%2C%22to%22%3A1435%7D%5D
• customer-olympus - Slack message: https://fleetdm.slack.com/archives/C04U4B1J40Y/p1738337330306439
• prospect-nuptel - Gong snippet: https://us-65885.app.gong.io/call?id=3021336541995409554&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A2886%2C%22to%22%3A2975%7D%5D
  I'm running into this with GlobalProtect: Unable to upload seperate package versions or update apps #20834. I need to be able to upload two different versions of the same GP client, one UI, and the other CLI. Is there a workaround, or will this be fixed soon?
• https://osquery.slack.com/archives/C01DXJL16D8/p1761591540250619
  • Community member supports tax software going back 7 years because the IRS requires that some companies (maybe if they're public) to be able to go back 7 years during an audit. We suspect that a specific years tax documents can only be opened using that specific years software version.
    • @allenhouchins: This is how it works for TurboTax.
• @noahtalerman: olympus requested this because they want to install different packages for Ubuntu 22 vs Ubuntu 24 that have the same package identifier and is blocked from uploading.
  • @noahtalerman: In the interim olympus could create two teams: "Ubuntu 22" and "Ubuntu 24"
  • @noahtalerman: In the interim olympus could re-package the package so that it has a different identifier (whatever Fleet is using to match software titles).
  • @noahtalerman: Eventually Fleet could allow the user to add the same package, for different OS versions, to the same team.
• @noahtalerman: nuptel requested this because they want to install different packages, GlobalProtect client, one UI, and the other CLI, that have the same package identifier and is blocked from uploading.
• @allenhouchins: Brock was trying to install Google Chrome on a Windows VM on an Apple Silicon Mac to troubleshoot Windows software installs for a Fleet customer. So, I wanted to add Google Chrome for Windows Arm to "Compliance exclusions" but we already have Google Chrome for Windows x86 on that team.
• @noahtalerman: User requested this because we (Fleet) manage software for Intel and Apple Silicon Macs. We can safely assume that our customers are required to do the same for at least 2 years (see below)
  • @allenhouchins: There are certain states that require hardware warranty for 7 years (CA for example). CA is the longest I've heard of. As an organization it doesn't make sense to support hardware that beyond warranty. Thus, we can hypothesize that Intel Macs will be phased out at most organizations whenever the macOS that supports Intel is beyond this threshold. November 2020 was the first M1. So, sometime around 2027 is when Intel might be phased out.
  • @allenhouchins: We can use the supported operating systems to dictate the supported hardware for macOS. Apple makes it easy to know which OS is supported on which hardware. Might be harder on Windows and Linux.
  • @noahtalerman: In the interim the user can create a "Workstations - ARM" and "Workstations - Intel" team and add the packages to each.
  • @noahtalerman: Eventually the user could add the same app for Intel and ARM workstations to the same team.

---

[noahtalerman]

@allenhouchins skipped this one during unpacking the why because, as a prospect request, it doesn't meet prioritization criteria: https://fleetdm.com/handbook/company/product-groups#criteria-for-prioritization.

[allenhouchins]

@noahtalerman putting back in our queue as we have a customer tied to this request now (customer-olympus)

[noahtalerman]

Problem

Admins need to be able to upload two different versions of the same GlobalProtect client, one UI, and the other CLI.

This extends into being able to manage multiple versions of the same software title too where I need to keep a certain group of devices on a specific version while being able to update all other devices.

What have you tried?

N/A

Potential solutions

Allow admins to upload software that shares the same identifier to a team.

What is the expected workflow as a result of your proposal?

Admins can upload multiple copies of the same software to a team.

[allenhouchins]

Running into this with dogfood. I need to be able to scope an x86 vs ARM version of software installers to Windows and Linux devices:

https://github.com/fleetdm/fleet/tree/main/it-and-security/lib/windows/software
https://github.com/fleetdm/fleet/tree/main/it-and-security/lib/linux/software

Re-adding product tag to discuss again.