Bug 486467

Summary: MacOS X builds failing on CI due to signing tool not liking files that can't be blacklisted
Product: [Unmaintained] Craft Reporter: Stefan Gerlach <stefan.gerlach>
Component: CoreAssignee: Stefan Gerlach <stefan.gerlach>
Status: RESOLVED NOT A BUG    
Severity: normal CC: kde-windows
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: Other   
OS: macOS   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Stefan Gerlach 2024-05-02 18:14:00 UTC
SUMMARY

Current CI build of LabPlot on macOS fail due to signing tool disliking added files. I was not able to blacklist these files.

2024-04-26 14:39:18,588 DEBUG sftpnotary.util stderr:
b'Executable=/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/MacOS/labplot2\nIdentifier=org.kde.labplot\nFormat=app bundle with Mach-O thin (x86_64)\nCodeDirectory v=20400 size=81683 flags=0x0(none) hashes=2546+3 location=embedded\nSignature size=8996\nTimestamp=26 Apr 2024 at 14:38:48\nInfo.plist entries=17\nTeamIdentifier=5433B4KXM8\nSealed Resources version=2 rules=13 files=7337\nInternal requirements count=1 size=176\n'
2024-04-26 14:39:18,588 INFO sftpnotary.util Running ['codesign', '--verify', '--verbose', '--strict', '--deep', PosixPath('/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app')] ...
2024-04-26 14:39:20,596 ERROR sftpnotary.util The process exited with 1
2024-04-26 14:39:20,596 DEBUG sftpnotary.util stdout:
b'file added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/libhdf5.settings\nfile added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/systemd/user/plasma-kglobalaccel.service\nfile added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/libnetcdf.settings\n'
2024-04-26 14:39:20,596 DEBUG sftpnotary.util stderr:
b'/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app: a sealed resource is missing or invalid\n'
Error: Running codesign failed

STEPS TO REPRODUCE
1.  Run CI build of LabPlot master (includes macOS builds)
2. 
3. 

OBSERVED RESULT
CI build fails signing

EXPECTED RESULT
CI build not failing

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 Stefan Gerlach 2024-05-13 21:57:10 UTC
Signing was done using the qt5-lts branch so blacklist must be changed in this branch.