Jason,
I have pushed cfengine out to 1500 macs. The only way was to touch
each one by hand as the Mac has no package management (this was talked
about in the Apple Guru talk at LISA'05 -- Apple is working on a
package management system for the future). Since we had timbuktu on
most machines, we hired a person who just installed a cfengine
installer that we created. The installer was a self extracting
archive that:
- setup the cfengine keys with the server
- installed the basic cfengine binaries
- ran cfengine 3 times to complete the machine configuration.