Re: Homebrew Gatekeeper Warning

--=-=-=
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On 2026-05-07 09:07, Greg Troxel <[email protected]> writes:

> I don't follow this technically.  Is homebrew extracting Unison.app from
> a CI binary obtained from github?  Or are they building from sources, as
> I would expect from a packaging system?

The answer is both. For unison, the command line tool, it is built:
https://github.com/Homebrew/homebrew-core/blob/8838958952404262429c68819ac9=
cec012e35c7c/Formula/u/unison.rb
and it is not deprecated

The GUI is not built but downloaded from github:
https://github.com/Homebrew/homebrew-cask/blob/ee404371e94ea58e45e573480368=
96dbec562d4d/Casks/u/unison-app.rb
so it is exactly as downloading the GUI from github (and so it suffers
from the same limitations regarding signing).

>> You can:
>>
>> xattr -d com.apple.quarantine '/Applications/LibreWolf.app/'
>>
>> removes the quarantine bit, so the application can run. So you can
>> install Unison using a dmg, and if the system complains about signing,
>> you can run the command above (tailored for Unison, of course) to fix
>> it.
>
> Is there a stable web site that explains this, with a bit more detail?
> We could add a pointer from:
>
>   https://github.com/bcpierce00/unison/wiki/CI-Binary-instructions
>
> which currently says one must
>
>   xattr -cr /Applications/Unison.app
>
> That is perhaps an unreasonably large hammer, but I wonder if it is
> sufficient.

I do not know of a website explaining this. The `xattr -cr` recursively
clears all extended attributes, so it is a big hammer indeed.

> In general, I see this as a macOS problem, not a unison problem, and
> would prefer to link to a well-maintained resource produced by people
> from the macOS world, that we can expect to adapt as Apple continues to
> change how macOS works.   It doesn't seem reasonable for every Free
> Software project to document workarounds for Apple not letting people do
> what they want on their own computers.

I agree, and I=E2=80=99m afraid things are not moving in the right directio=
n for
macOS.

Best,

Alan

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQFvBAEBCABZFiEE6lXof/BsSVW56ZmGBA0KO07S5ccFAmn8p9QbFIAAAAAABAAO
bWFudTIsMi41KzEuMTIsMCwzHxxhbGFuLnNjaG1pdHRAcG9seXRlY2huaXF1ZS5v
cmcACgkQBA0KO07S5ccMMwf+NeCfjPWqddQHFtrAQnTCU8kyHK4U5r55FPL4scaU
wtcJ5AwMdgyGx37nsz8CSEqaHwMxxEpusjwKqqOOPHJb390u2hHDRGI4PCKNfO5p
Cm1wFf4mOhS7OtUkHzxlRMew3FxNyAc/Y9agKgdytQ9gKRKSH5jTMP1Lx6wc1pt/
t2sdEujJAOLibCMnfZHOiB4N0mEIospgd6T0smxtJUpMXlkTby1nIloaIjX7zZTe
5gzaCBpDD+7n/TZD+RKRc1DhMRkrN6/5bkpj+JT176/bKAQamSYC3eqr+S2zJVWy
XrurhcKFoZ/ikURuTMSJIZVh1O42k/fOhuA19B/iVPTCDA==
=Qscy
-----END PGP SIGNATURE-----
--=-=-=--