4 ms·

Did anyone figure out how to just get a DMG or whatever created outside Xcode notarized? These docs are too Xcode focused.

• varenc 8y ago
  The docs say you can use ‘xcrun altool’ to get a dmg/zip/pkg notarized. That’s an XCode tool but no indication that what you’re submitting needs to be created in XCode.
  • saagarjha 8y ago
    Xcode doesn't do anything special to your binary; you should be able to submit a valid codesigned application bundle AFAIK.
    • foobarbazetc 8y ago
      The problem is the “submit” part. I.e. the docs say “xcrun aitool” but doing that gets some you an undocumented CLI app where it seems like you have to supply your Apple ID and password on the command line. Seems... less than ideal? How does that work with 2FA?
      • geocar 8y ago
        > How does that work with 2FA? It's for people who want to submit their app non-interactively (e.g. as part of a build process). Those people aren't going to use 2FA since the keys are under control of a robot.
  • xenadu02 8y ago
    xcrun just locates tools inside the current $DEVELOPER_DIR, which is inside the Xcode.app bundle (based on which Xcode is selected with xcode-select). You can think of xcode-select as virtualenv or similar systems: you select which version of the tools you want to use. Fun fact: If you symlink xcrun as a different name, it will assume that is the name of the tool you wish to run. So "ln -s /usr/bin/xcrun altool" will make altool an alias to run the version of altool bundled with the currently selected Xcode.