Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Thanks for this great idea! #11

Closed
juanfal opened this issue Oct 4, 2016 · 4 comments
Closed

Thanks for this great idea! #11

juanfal opened this issue Oct 4, 2016 · 4 comments

Comments

@juanfal
Copy link

juanfal commented Oct 4, 2016

I've needed to pick the swift files and build a new project, as it needs to be correctly signed.

Couldn't it be done with swift, perhaps, but through the command line?

@fulldecent
Copy link
Owner

Same thing in #12 with some details.

I am not aware of any way to publish needs-to-be-signed code through Homebrew. Have you seen anyone else do this before?

@ilovezfs
Copy link

ilovezfs commented Oct 5, 2016

@fulldecent no, Homebrew does not have its own signing certificates (and even if we were to have them, we wouldn't use them to sign third-party software). Nor does Homebrew Core distribute binaries provided by upstream. All of the binary bottles are built by us from source.

However, we do offer an alternative, which is called "Homebrew Cask," the code for which was recently absorbed into Homebrew itself. Cask is used for pre-built binaries, which may be signed by upstream. Typically Cask distributes GUI apps, but can be used for any binary distribution that cannot be built by downstream from source for a variety of reasons. So if signing is now an absolute requirement, you may want to consider transitioning your Homebrew distribution to Homebrew Cask distribution. The main repository for the actual cask files is https://github.com/caskroom/homebrew-cask

Note that typically, though, it's possible to configure the upstream software not to need signing. For example, we distribute LLVM, which requires signing for lldb, so that component is not provided by default, but users can build from source themselves if they want lldb and can sign it themselves. The rest of LLVM doesn't need to be signed, so we're able to distribute that, including clang.

@fulldecent
Copy link
Owner

God, Apple keeps make releasing harder and harder. This used to work fine and we could release through Homebrew. And that is the preferred route. Today's XKCD http://xkcd.com/1742/ is very relevant here.

But if we need to do binaries, I can consider that too.

@fulldecent
Copy link
Owner

We made a big change and moved this to Homebrew. Should be fixed now from Homebrew/homebrew-cask#31827

See updated README.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants