Re: Homebrew Gatekeeper Warning

Alan Schmitt <[email protected]> writes:

> On 2026-05-06 20:09, Greg Troxel <[email protected]> writes:
>
>> I would talk to homebrew people about this.  I don't know what Apple is
>> doing, but homebrew is likely dealing with whatever the new rules are
>> across a wide variety of upstreams.
>
> I=E2=80=99m not sure homebrew is going to do anything about it. Their pol=
icy is
> they now refuse to installed unsigned apps. Librewolf has the same
> problem and is trying to set up signing certificates.

I don't follow this technically.  Is homebrew extracting Unison.app from
a CI binary obtained from github?  Or are they building from sources, as
I would expect from a packaging system?  If they are building, then what
they build won't be bit-for-bit identical (reproducible builds are
becoming more of a thing but I don't believe unison and the github CI
world are close).  So homebrew would need to sign the .app that they
build.

I could well be off here, and would apreciate a clear explanation if so.

>> Please also contact apple support and report this as a bug.  It's
>> obvious that a computer's owner should be able to decide what to run.
>
> You can:
>
> xattr -d com.apple.quarantine '/Applications/LibreWolf.app/'
>
> removes the quarantine bit, so the application can run. So you can
> install Unison using a dmg, and if the system complains about signing,
> you can run the command above (tailored for Unison, of course) to fix
> it.

Is there a stable web site that explains this, with a bit more detail?
We could add a pointer from:

  https://urldefense.com/v3/__https://github.com/bcpierce00/unison/wiki/CI-=
Binary-instructions__;!!IBzWLUs!Tw5dirI3JWbPDMaEny2dFEMbXzLe4z6wfjeysYUwv3C=
JjqAaTkhe9YUFpR_FZ1zMLoS-a_LA9h_aNOX0Zg$=20

which currently says one must

  xattr -cr /Applications/Unison.app

That is perhaps an unreasonably large hammer, but I wonder if it is
sufficient.

In general, I see this as a macOS problem, not a unison problem, and
would prefer to link to a well-maintained resource produced by people
from the macOS world, that we can expect to adapt as Apple continues to
change how macOS works.   It doesn't seem reasonable for every Free
Software project to document workarounds for Apple not letting people do
what they want on their own computers.

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].