Merge pull request #13114 from danielnachun/move_codesign_patched_binary
Move codesign_patched_binary to extend/os/mac/keg.rb
This commit is contained in:
commit
23cf66df6a
@ -25,4 +25,41 @@ class Keg
|
|||||||
def binary_executable_or_library_files
|
def binary_executable_or_library_files
|
||||||
mach_o_files
|
mach_o_files
|
||||||
end
|
end
|
||||||
|
|
||||||
|
def codesign_patched_binary(file)
|
||||||
|
return if MacOS.version < :big_sur
|
||||||
|
return unless Hardware::CPU.arm?
|
||||||
|
|
||||||
|
odebug "Codesigning #{file}"
|
||||||
|
# Use quiet_system to squash notifications about resigning binaries
|
||||||
|
# which already have valid signatures.
|
||||||
|
return if quiet_system("codesign", "--sign", "-", "--force",
|
||||||
|
"--preserve-metadata=entitlements,requirements,flags,runtime",
|
||||||
|
file)
|
||||||
|
|
||||||
|
# If the codesigning fails, it may be a bug in Apple's codesign utility
|
||||||
|
# A known workaround is to copy the file to another inode, then move it back
|
||||||
|
# erasing the previous file. Then sign again.
|
||||||
|
#
|
||||||
|
# TODO: remove this once the bug in Apple's codesign utility is fixed
|
||||||
|
Dir::Tmpname.create("workaround") do |tmppath|
|
||||||
|
FileUtils.cp file, tmppath
|
||||||
|
FileUtils.mv tmppath, file, force: true
|
||||||
|
end
|
||||||
|
|
||||||
|
# Try signing again
|
||||||
|
odebug "Codesigning (2nd try) #{file}"
|
||||||
|
result = system_command("codesign", args: [
|
||||||
|
"--sign", "-", "--force",
|
||||||
|
"--preserve-metadata=entitlements,requirements,flags,runtime",
|
||||||
|
file
|
||||||
|
], print_stderr: false)
|
||||||
|
return if result.success?
|
||||||
|
|
||||||
|
# If it fails again, error out
|
||||||
|
onoe <<~EOS
|
||||||
|
Failed applying an ad-hoc signature to #{file}:
|
||||||
|
#{result.stderr}
|
||||||
|
EOS
|
||||||
|
end
|
||||||
end
|
end
|
||||||
|
@ -529,6 +529,8 @@ class Keg
|
|||||||
elf_files
|
elf_files
|
||||||
end
|
end
|
||||||
|
|
||||||
|
def codesign_patched_binary(file); end
|
||||||
|
|
||||||
private
|
private
|
||||||
|
|
||||||
def resolve_any_conflicts(dst, dry_run: false, verbose: false, overwrite: false)
|
def resolve_any_conflicts(dst, dry_run: false, verbose: false, overwrite: false)
|
||||||
|
@ -60,41 +60,4 @@ class Keg
|
|||||||
EOS
|
EOS
|
||||||
raise
|
raise
|
||||||
end
|
end
|
||||||
|
|
||||||
def codesign_patched_binary(file)
|
|
||||||
return if MacOS.version < :big_sur
|
|
||||||
return unless Hardware::CPU.arm?
|
|
||||||
|
|
||||||
odebug "Codesigning #{file}"
|
|
||||||
# Use quiet_system to squash notifications about resigning binaries
|
|
||||||
# which already have valid signatures.
|
|
||||||
return if quiet_system("codesign", "--sign", "-", "--force",
|
|
||||||
"--preserve-metadata=entitlements,requirements,flags,runtime",
|
|
||||||
file)
|
|
||||||
|
|
||||||
# If the codesigning fails, it may be a bug in Apple's codesign utility
|
|
||||||
# A known workaround is to copy the file to another inode, then move it back
|
|
||||||
# erasing the previous file. Then sign again.
|
|
||||||
#
|
|
||||||
# TODO: remove this once the bug in Apple's codesign utility is fixed
|
|
||||||
Dir::Tmpname.create("workaround") do |tmppath|
|
|
||||||
FileUtils.cp file, tmppath
|
|
||||||
FileUtils.mv tmppath, file, force: true
|
|
||||||
end
|
|
||||||
|
|
||||||
# Try signing again
|
|
||||||
odebug "Codesigning (2nd try) #{file}"
|
|
||||||
result = system_command("codesign", args: [
|
|
||||||
"--sign", "-", "--force",
|
|
||||||
"--preserve-metadata=entitlements,requirements,flags,runtime",
|
|
||||||
file
|
|
||||||
], print_stderr: false)
|
|
||||||
return if result.success?
|
|
||||||
|
|
||||||
# If it fails again, error out
|
|
||||||
onoe <<~EOS
|
|
||||||
Failed applying an ad-hoc signature to #{file}:
|
|
||||||
#{result.stderr}
|
|
||||||
EOS
|
|
||||||
end
|
|
||||||
end
|
end
|
||||||
|
Loading…
x
Reference in New Issue
Block a user