github-wownero/wowlet
1
0
Fork 0
mirror of https://github.com/wownero/wowlet.git synced 2026-10-17 07:11:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci(macos): ad-hoc sign tor before embedding — arm64 macOS SIGKILLs unsigned binaries, including the runtime-unpacked copy on user machines

Browse Source
This commit is contained in:
jwinterm
2026-08-29 14:17:26 -04:00
parent 1fedbf0faa
commit 0f6892c123
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build-macos.yml
+4
View File
@@ -68,6 +68,10 @@ jobs:
curl -L -o /tmp/teb.tgz "https://archive.torproject.org/tor-package-archive/torbrowser/15.0/$TORTAR"
tar xzf /tmp/teb.tgz -C /tmp/teb
cp /tmp/teb/tor/tor /tmp/teb/tor/libevent-*.dylib /tmp/tor-embed/
# tor ships UNSIGNED; arm64 macOS SIGKILLs unsigned binaries. Ad-hoc sign
# BEFORE embedding — the signature travels inside the file, so the copy
# the app unpacks at runtime on user machines is runnable too.
codesign -s - -f /tmp/tor-embed/tor /tmp/tor-embed/libevent-*.dylib
chmod +x /tmp/tor-embed/tor
# expert-bundle RELEASE number (15.0) is NOT the tor version — derive it
TORVER=$(/tmp/tor-embed/tor --version | grep -oE '[0-9]+(\.[0-9]+){3}' | head -1)