sd icon indicating copy to clipboard operation
sd copied to clipboard

v1.0.0 darwin x86 binary cannot be run right away as dev can't be verified

Open balupton opened this issue 2 years ago • 8 comments

“sd” cannot be opened because the developer cannot be verified.

CleanShot 2023-11-11 at 00 08 21@2x

doing the right-click open trick makes it work from then on, however I'm unsure of any programatic way of doing that

balupton avatar Nov 10 '23 16:11 balupton

Okay the trick is xattr -d com.apple.quarantine ...

balupton avatar Nov 10 '23 16:11 balupton

If you open your privacy and security settings, there will appear a password-protected button to let you run the app even tho it's not verified.

NoahTheDuke avatar Nov 10 '23 17:11 NoahTheDuke

Thanks for opening the issue. I'll have to poke around and see what all is needed to handle signing the binary

CosmicHorrorDev avatar Nov 10 '23 18:11 CosmicHorrorDev

Perhaps adding an install.sh that

  • moves the package into ~/.local/opt/sd/ or ~/.local/{bin,share}
  • runs xattrs on Darwin (macOS)
  • echos the line to add to PATH to put in the shell

coolaj86 avatar Nov 25 '23 08:11 coolaj86

Kindly consider using Homebrew or MacPorts or nix-darwin. Tarballs aren't really a good way to install CLI programs.

nc7s avatar Nov 25 '23 19:11 nc7s

I also just updated https://webinstall.dev/sd for the v1 package structure.

(it uses your uname -srm output to match the correct build for your system and then the download from GitHub happens directly from your terminal - avoiding the need for 500mb of unrelated git history or 50mb of package management history just to download a single file)

coolaj86 avatar Nov 25 '23 19:11 coolaj86

Kindly consider using Homebrew or MacPorts or nix-darwin. Tarballs aren't really a good way to install CLI programs.

Those tools use the tarball.

For myself, the tooling is Dorothy, which now dequarantines bins:

https://github.com/bevry/dorothy/commit/cc23edba83288fb2f66c36c8296704ba15a4e8ab

balupton avatar Nov 26 '23 06:11 balupton

Those tools use the tarball.

With, quote, "500mb of unrelated git history or 50mb of package management history". They are complete software package management systems, with features including but not limited to, file hash verification, installation steps tailored to the OS, etc.

But you are right to use anything you like. I shouldn't and won't waste more time on this topic.

nc7s avatar Nov 26 '23 16:11 nc7s