[bug] Can't open installer

[thewh1teagle]

Describe the bug

What happened?

In macOS 15.1 M1 max the installer yield the following error dialog

This happens after right click -> open as well!
The app sugned with self signed certificate.

What OS are you seeing the problem on?

No response

Reproduction

No response

Full tauri info output

https://github.com/thewh1teagle/vibe/blob/269758a4c350ad4bdd8ec99dd2b8f90dc933b159/desktop/src-tauri/Cargo.toml

Stack trace

No response

Additional context

v3.0.0 source: https://github.com/thewh1teagle/vibe/tree/269758a4c350ad4bdd8ec99dd2b8f90dc933b159

Related:

• [Bug]: Apple cannot verify that this app is free from malware thewh1teagle/vibe#353
• Can't open installer on macOS  thewh1teagle/vibe#472

[FabianLars]

I'm not sure what you expect us to do here tbh. This is apple being apple 🤷

Maybe #6908 is worth a try though, can't remember why i closed it. You can try that via

cargo install tauri-cli --debug --git https://github.com/tauri-apps/tauri --branch test/disable-dmg-signer
cargo tauri build

For use in tauri-action you can set tauriScript: cargo tauri instead of using cargo tauri build

[thewh1teagle]

I'm not sure what you expect us to do here tbh. This is apple being apple 🤷

Totally : /
I actually can't reproduce it on my machine. I'm on 14.5. but users reported and turns out it's not possible at all to install it even with right click -> open.

Maybe #6908 is worth a try though, can't remember why i closed it. You can try that via

Interesting. I see that you disabled the signing of the dmg itself.
I would try with electron on the same macOS version and see if it works fine with/without signing with self signed certificate.
I can't reproduce it, so ig I'll need to wait to someone who experience the same issue.

[FabianLars]

I think i see the same issue on my macbook with your 3.0.0 dmg if that would help

[thewh1teagle]

I think i see the same issue on my macbook with your 3.0.0 dmg if that would help

Do you see the term damaged in the error message?

Also, while it shows the error message, can you check in settings -> privacy -> at the bottom there should be some section related to the current unidentified app with option to allow? (screenshot thewh1teagle/vibe#353 (comment))

Other things that may work:

xattr

xattr -d com.apple.quarantine <file>

codesign

codesign --force --deep -s - <file>

[FabianLars]

No mention of "damaged", just that it cannot check if it's free from malware and privacy issues.

It shows up in the settings right after i close the error dialog. And then i can open the dmg as shown in the video with password etc.

After installation i get the same warning again for the app itself though. And have to go to the settings again after dismissing the dialog.

xattr if applied to the dmg only fixes it for the dmg so after installation you have to call it again on the app itself.

the codesign command does not work if applied on the dmg

[thewh1teagle]

After installation i get the same warning again for the app itself though. And have to go to the settings again after dismissing the dialog.

and after finally it opens normally?

Can you try fresh electron dmg that I built?

https://github.com/thewh1teagle/vibe/releases/download/v3.0.0/electron-app-1.0.0.dmg

If the dmg works fine, it means that most probably there's things we can do to fix it

Build commands

Note: local build is probably trusted so the dialog won't shown unless uploaded somewhere and downloaded from there again

bun create @quick-start/electron@latest
# Enter.. Enter...
cd electron-app
bun install
bun run build
bun run build:mac
open ./dist/electron-app-1.0.0.dmg

[FabianLars]

and after finally it opens normally?

yes

Can you try fresh electron dmg that I built?

That dmg can be opened. The installed .app will display the damaged warning instead of the verify stuff

Note: local build is probably trusted so the dialog won't shown unless uploaded somewhere and downloaded from there again

correct, that makes it super annoying to debug/test

[FabianLars]

the electron results sounds like we're back at #12288 (comment)

[thewh1teagle]

That dmg can be opened. The installed .app will display the damaged warning instead of the verify stuff

And right click in Application folder -> open works? (Even twice)

the electron results sounds like we're back at #12288 (comment)

I guess you already tried the branch you mentioned

Apple complicate things :/ but I still believe there's a workaround

[FabianLars]

And right click in Application folder -> open works? (Even twice)

Not without the xattr stuff cause i assume it's not self signed

I guess you already tried the branch you mentioned

No i didn't cause i was too lazy to upload anything / set up ci for 😂