4 ms·

It's an Electron app AND blockchain related; hackernews's two favorite things to hate. I don't expect much love from this crowd. Heh. It's certainly either som

It's an Electron app AND blockchain related; hackernews's two favorite things to hate. I don't expect much love from this crowd. Heh. It's certainly either something I'm doing wrong, or a big in the software I'm using to automate signing, notification and stapling. Here's the issue I opened on the software I'm using to automate: https://github.com/electron-userland/electron-builder/issues/7755 https://github.com/electron-userland/electron-builder/issues... that issue kinks to the PR that adds the automation. It's a non-trivial thing to test, since it involves so many secrets and the notarization step can take over an hour, so I don't expect anyone here to actually want to look into it. My original comment really was just venting my frustration, not a cry for help (but I might be crying soon if I cant get to the bottom of this!).

terhechte 3y ago
I’m on mobile, so short help: in one of my projects I’m building a binary in Rust and then using Xcode to notarize it by replacing the binary of another shell app that I’m Bildung in Xcode. This works really well. Check out the description here: https://github.com/terhechte/Ebou https://github.com/terhechte/Ebou
- davidmurdoch 3y ago
  Thanks! I'll take a look at the specifics tomorrow.
jamil7 3y ago
Thanks for the response. The output of `spctl` on your latest build (2.7.2, downloaded from the build artefacts section of Github Actions gives me the following: /Applications/Ganache.app: rejected (invalid destination for symbolic link in bundle) origin=Developer ID Application: ConsenSys AG (48XVW22RCG) I see you're also migrating to Github Actions for this particular release and that the notarization process was working correctly on your previous CI/CD? I guess there has to be an issue with the new environment here or the way you're building it now.
- dunham 3y ago
  Probably the five links to /usr/local/bin/python3 in node_modules. Does the app need node_modules bundled?
mike_hearn 3y ago
You could try experimenting with Hydraulic Conveyor [1]. I built it originally due to the frustrations involved in distributing P2P software during my old Bitcoin days so you won't get any hate from me about that ;) Conveyor can package Electron apps and also do all the Mac specific stuff from any platform including Linux. So it can sign, notarize and staple the app itself, also bundling Sparkle updates as it goes. We're listed on the Electron website these days. You may have more luck with it. There's a Discord channel for help too if you get stuck. [1] https://hydraulic.dev/ https://hydraulic.dev/ (disclosure: my company)
- davidmurdoch 3y ago
  Thanks for this! I've made a new issue to look into switching. It'd be great to find something that Just Works™!

terhechte 3y ago

I’m on mobile, so short help: in one of my projects I’m building a binary in Rust and then using Xcode to notarize it by replacing the binary of another shell app that I’m Bildung in Xcode. This works really well. Check out the description here: https://github.com/terhechte/Ebou https://github.com/terhechte/Ebou

davidmurdoch 3y ago
Thanks! I'll take a look at the specifics tomorrow.

jamil7 3y ago

Thanks for the response. The output of `spctl` on your latest build (2.7.2, downloaded from the build artefacts section of Github Actions gives me the following: /Applications/Ganache.app: rejected (invalid destination for symbolic link in bundle) origin=Developer ID Application: ConsenSys AG (48XVW22RCG) I see you're also migrating to Github Actions for this particular release and that the notarization process was working correctly on your previous CI/CD? I guess there has to be an issue with the new environment here or the way you're building it now.

dunham 3y ago
Probably the five links to /usr/local/bin/python3 in node_modules. Does the app need node_modules bundled?

mike_hearn 3y ago

You could try experimenting with Hydraulic Conveyor [1]. I built it originally due to the frustrations involved in distributing P2P software during my old Bitcoin days so you won't get any hate from me about that ;) Conveyor can package Electron apps and also do all the Mac specific stuff from any platform including Linux. So it can sign, notarize and staple the app itself, also bundling Sparkle updates as it goes. We're listed on the Electron website these days. You may have more luck with it. There's a Discord channel for help too if you get stuck. [1] https://hydraulic.dev/ https://hydraulic.dev/ (disclosure: my company)

davidmurdoch 3y ago
Thanks for this! I've made a new issue to look into switching. It'd be great to find something that Just Works™!