Bug 486467 - MacOS X builds failing on CI due to signing tool not liking files that can't be blacklisted
Summary: MacOS X builds failing on CI due to signing tool not liking files that can't ...
Status: RESOLVED NOT A BUG
Alias: None
Product: Craft
Classification: Developer tools
Component: Core (show other bugs)
Version: unspecified
Platform: Other macOS
: NOR normal
Target Milestone: ---
Assignee: Stefan Gerlach
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-02 18:14 UTC by Stefan Gerlach
Modified: 2024-05-13 21:57 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gerlach 2024-05-02 18:14:00 UTC 
SUMMARY

Current CI build of LabPlot on macOS fail due to signing tool disliking added files. I was not able to blacklist these files.

2024-04-26 14:39:18,588 DEBUG sftpnotary.util stderr:
b'Executable=/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/MacOS/labplot2\nIdentifier=org.kde.labplot\nFormat=app bundle with Mach-O thin (x86_64)\nCodeDirectory v=20400 size=81683 flags=0x0(none) hashes=2546+3 location=embedded\nSignature size=8996\nTimestamp=26 Apr 2024 at 14:38:48\nInfo.plist entries=17\nTeamIdentifier=5433B4KXM8\nSealed Resources version=2 rules=13 files=7337\nInternal requirements count=1 size=176\n'
2024-04-26 14:39:18,588 INFO sftpnotary.util Running ['codesign', '--verify', '--verbose', '--strict', '--deep', PosixPath('/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app')] ...
2024-04-26 14:39:20,596 ERROR sftpnotary.util The process exited with 1
2024-04-26 14:39:20,596 DEBUG sftpnotary.util stdout:
b'file added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/libhdf5.settings\nfile added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/systemd/user/plasma-kglobalaccel.service\nfile added: /Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app/Contents/Frameworks/libnetcdf.settings\n'
2024-04-26 14:39:20,596 DEBUG sftpnotary.util stderr:
b'/Users/gitlab/ws/builds/GZwHuM5x/0/education/labplot/macos-64-clang/build/kde/applications/labplot/archive/Applications/KDE/labplot2.app: a sealed resource is missing or invalid\n'
Error: Running codesign failed

STEPS TO REPRODUCE
1.  Run CI build of LabPlot master (includes macOS builds)
2. 
3. 

OBSERVED RESULT
CI build fails signing

EXPECTED RESULT
CI build not failing

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 Stefan Gerlach 2024-05-13 21:57:10 UTC 
Signing was done using the qt5-lts branch so blacklist must be changed in this branch.