diff options
| author | kali <kali@leap.se> | 2021-02-19 12:20:55 +0100 |
|---|---|---|
| committer | kali kaneko (leap communications) <kali@leap.se> | 2021-02-26 22:40:44 +0100 |
| commit | 4a4b6b46f84c28640c711655f4f3c339ccf8fbba (patch) | |
| tree | fd17ca92a5366251133b400866e8a5e97891712f /docs/build.osx.rst | |
| parent | 51308ecd42d4c8d7724a8eaf517294fd9d369cf0 (diff) | |
[pkg] improve osx installer
- install into global /Applications
- document how to troubleshoot helper
- uninstall app is visible on top-level folder
- improve detection of running processes for old and new binaries
- Closes: #441
- Closes: #445
- Closes: #435
Diffstat (limited to 'docs/build.osx.rst')
| -rw-r--r-- | docs/build.osx.rst | 19 |
1 files changed, 16 insertions, 3 deletions
diff --git a/docs/build.osx.rst b/docs/build.osx.rst index 43d70ad..48836a7 100644 --- a/docs/build.osx.rst +++ b/docs/build.osx.rst @@ -9,11 +9,12 @@ have to sign and then notarize with their service. here are some notes that use ad-hoc targets in the main makefile, but we should keep an eye on any future integration of this process in the more or less official Qt tools (QTIFW). -First, we build the regular installer +First, we build the regular installer (use RELEASE=yes to do a codesign step +with macqtdeploy, note that this increases build time considerably): ``` make build -make installer +RELEASE=yes make installer make sign_installer ``` @@ -23,6 +24,18 @@ account. Contact their friendly support for more info, but don't expect they understand you do not really own any Apple Hardware. Sense of humor is not universal. +Security -> App-specific passwords -> Generate +If you need to revoke these tokens, click on 'view history'. + +https://appleid.apple.com/account/manage + +According to https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow: + +To avoid including your password as cleartext in a script, you can provide a +reference to a keychain item, as shown in the previous example. This assumes +the keychain holds a keychain item named AC_PASSWORD with an account value +matching the username AC_USERNAME. + ``` export OSXAPPPASS=my-apple-app-pass make notarize_installer @@ -37,7 +50,7 @@ altool[5281:91963] No errors uploading 'build/installer/RiseupVPN-installer-0.20 RequestUUID = fe9a4324-bdcb-4c52-b857-f089dc904695 OSXMORDORUID=fe9a4324-bdcb-4c52-b857-f089dc904695 make notarize_check -xcrun altool --notarization-info fe9a4324-bdcb-4c52-b857-f089dc904695 -u "info@leap.se" -p nvaq-xdhq-wrho-ouuu +xcrun altool --notarization-info fe9a4324-bdcb-4c52-b857-f089dc904695 -u "info@leap.se" -p my-apple-app-pass 2020-12-11 22:21:59.940 altool[5787:96428] No errors getting notarization info. RequestUUID: fe9a4324-bdcb-4c52-b857-f089dc904695 |