MacOS 26 on Margrop Blog

Stop Treating Passkeys as SSH Passwords: The Right Way to Use SSH Keys and Phone/Desktop Passkeys

Tue, 30 Jun 2026 09:30:00 +0800

Short version

SSH passwordless login and passkeys on phones, Macs, and Windows PCs both use the public-key idea, but they are not the same tool. SSH keys are for logging in to servers, Git remotes, jump boxes, and automation endpoints. Passkeys are for signing in to websites, apps, and account systems. They are like two modern key rings: one opens the machine-room door, the other opens your online account door. The cryptographic idea is related, but the locks are different.

The practical rule is simple: generate a separate SSH key on each client device, keep the private key only on that device or inside a hardware security key, and put only the public key on the server. Verify public-key login before disabling password login. Use passkeys through iPhone, Android, macOS 26, Windows 11, system password managers, or hardware security keys for website and app sign-in. Do not try to paste a phone passkey into authorized_keys. This post includes one-click scripts for Windows 11, Ubuntu 26.04, and macOS 26, plus a manual automation path and an Agent-driven configuration path. The examples do not depend on any third-party service and do not contain real internal addresses, full computer names, private domains, or secrets.

Stop Clicking Update One App at a Time: Let an Agent Upgrade Common Software on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 08:58:00 +0800

Short version

Updating everyday software is painful not because the commands are impossible, but because the update sources are scattered across several worlds. Windows 11 has WinGet, Microsoft Store, and vendor installers. Ubuntu 26.04 has apt, snap, flatpak, and service restarts. macOS 26 has Software Update, App Store, Homebrew, and applications downloaded outside the store. A human can easily miss something. An AI Agent can help, but only if you give it boundaries.

My recommendation is to treat the Agent as an update operator: inventory first, dry-run second, execute third, verify last. This article provides three one-command scripts for Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party update assistants or cloud services. They call only built-in update tools and package managers already installed and configured on the machine. The examples contain no real private address, full computer name, private domain, token, or key.

Is Your Computer Always Full? Use an AI Agent to Safely Clean Junk Files on Windows 11, Ubuntu 26.04, and macOS 26

Sun, 28 Jun 2026 07:15:00 +0800

Short version

Junk cleanup is risky not because it is hard to delete files, but because it is easy to delete too much. On Windows 11, Ubuntu 26.04, and macOS 26, the safe cleanup targets are usually temporary directories, package caches, old logs, recycle bin or trash contents, and files that can be regenerated. A cleanup script should not casually touch documents, photos, browser profiles, keys, certificates, virtual machine images, or application data.

This article gives you two paths: manual automation, where you run the scripts yourself, inspect the dry-run output, and then explicitly enable deletion; and Agent-driven automation, where Codex, Claude, OpenClaw, HermesAgent, or another AI Agent performs the same scan, review, execution, and verification flow for you. The three scripts cover Windows 11, Ubuntu 26.04, and macOS 26. They do not depend on third-party services, do not download cleanup utilities, and do not contain real private addresses, computer names, private domains, or secrets.

Chrome Ate 4GB of Disk Space? Delete the Local AI Model and Stop It Coming Back

Sat, 27 Jun 2026 23:00:00 +0800

Short version

Some Google Chrome installations now download several gigabytes of local generative AI model data in the background. This is usually not malware and not a broken cache. It is Chrome preparing on-device AI models for browser and web features. Deleting the folder only frees disk space temporarily. The durable fix is to disable the local GenAI foundational model download with Chrome policy, then remove the already downloaded model folders.

This guide covers Windows 11, Ubuntu 26.04, and macOS 26. It includes one-click scripts, manual steps, and an agent prompt you can hand to Codex, Claude, OpenClaw, Gemini CLI, or another local operator. The scripts use native OS policy mechanisms and Chrome’s documented policy. They do not depend on third-party services and do not include real IP addresses, hostnames, internal domains, or secrets.

macOS 26 Boot Daemons: Put frp and EasyTier in LaunchDaemons, Not Login Items

Sat, 27 Jun 2026 17:12:00 +0800

Short version

If you want frp, EasyTier, a sync agent, a collector, a bot, or a proxy daemon to start automatically on macOS 26, the key is not “where can I hide this command?” The key is “which native service manager owns its lifecycle?” This article is about unattended background services, not ordinary desktop login apps.

On macOS 26, a daemon that must start before user login belongs in /Library/LaunchDaemons. Login items and LaunchAgents are tools opened after a person enters the room. LaunchDaemons are more like the building’s elevator or water pump: they should run as the machine comes up.

I will show two paths: manual configuration, for understanding every moving part, and agent / one-click automation, for cases where you already know where the binary and config file live. The scripts are self-contained, use built-in OS mechanisms, do not download third-party wrappers, and do not include real addresses, hostnames, private domains, or secrets.