fix(sign): cannot notarize (#6)

When notarizing the APP, it's necessary to add `--options=runtime`. At the same time, the issue of krun not being able to load dylib through env has been fixed, along with some spelling errors. Signed-off-by: Kevin Cui <[email protected]>
oomol-lab · Oct 25, 2024 · 04e808d · 04e808d
1 parent ab39af6
commit 04e808d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/krunkit.entitlements b/krunkit.entitlements
@@ -4,7 +4,9 @@
 <dict>
 	<key>com.apple.security.hypervisor</key>
 	<true/>
-	<key>com.apple.security.cs.disable-library-validationr</key>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+	<key>com.apple.security.cs.allow-dyld-environment-variables</key>
 	<true/>
 </dict>
 </plist>
diff --git a/main.sh b/main.sh
@@ -40,12 +40,12 @@ cd $WORK
 
 # codesign
 echo "Signing gvproxy..."
-codesign --force --sign $CODESIGN_IDENTITY --timestamp $WORK/out/gvproxy
+codesign --force --sign $CODESIGN_IDENTITY --options=runtime --timestamp $WORK/out/gvproxy
 
 echo "Signing krunkit..."
-codesign --force --sign $CODESIGN_IDENTITY --timestamp --entitlements krunkit.entitlements $WORK/out/krunkit
+codesign --force --sign $CODESIGN_IDENTITY --options=runtime --timestamp --entitlements krunkit.entitlements $WORK/out/krunkit
 
-find $WORK/out -name "*.dylib" -type f -exec sh -c "echo 'Signing {}...'; codesign --force --sign $CODESIGN_IDENTITY --timestamp {}" ';'
+find $WORK/out -name "*.dylib" -type f -exec sh -c "echo 'Signing {}...'; codesign --force --sign $CODESIGN_IDENTITY --options=runtime --timestamp {}" ';'
 
 # pack
 echo "Packing..."