[GR-49896] GraalVM not (yet) notarized for macOS Catalina

Question

[GR-49896] GraalVM not (yet) notarized for macOS Catalina

fniephaus opened this issue 5 years ago · 13 comments

GraalVM should eventually be notarized for macOS. I'm not sure if published releases can be notarized in retrospect, but that'd be great too.

More information: https://developer.apple.com/news/?id=09032019a

Related: graalvm/homebrew-tap#6

Answer 1 · 2019-10-08T13:04:18.000Z

In the meantime, sudo xattr -r -d com.apple.quarantine /path/to/graalvm should be enough to get you going on macOS Catalina, no need to disable Gatekeeper.

Answer 2 · 2019-10-09T18:48:52.000Z

Hi @fniephaus, I have an error xattr: /xx/xx/graalvm-ce/Contents/Home: No such xattr: com.apple.quarantine when running the command xattr -d com.apple.quarantine $GRAALVM_HOME. Thoughts?

Answer 3 · 2019-10-09T18:56:53.000Z

@machi1990 you might need to launch GraalVM once...and what if you run it against /xx/xx/graalvm-ce instead of the Home dir?

Answer 4 · 2019-10-09T19:27:21.000Z

and what if you run it against /xx/xx/graalvm-ce instead of the Home dir?

With this I am not seeing the previous error but “gu” cannot be opened because the developer cannot be verified, like the command did not have any effect.

Answer 5 · 2019-10-09T19:46:21.000Z

Looks like you actually have to run it recursively against GraalVM's root directory:
xattr -r -d com.apple.quarantine /xx/xx/graalvm-ce-19.2.0.1

Answer 6 · 2019-10-09T19:56:44.000Z

Looks like you actually have to run it recursively against GraalVM's root directory:
xattr -r -d com.apple.quarantine /xx/xx/graalvm-ce-19.2.0.1

Thanks, this seems to do the trick. Running the command as sudo might be required :-)

Answer 7 · 2019-10-09T19:59:15.000Z

@machi1990 glad it's working for you now!

Answer 8 · 2019-10-09T19:59:51.000Z

Yeah, I am glad too. Let me update the PR that I just tagged you :-)

Answer 9 · 2020-01-13T12:17:58.000Z

Hi, i think i have the same problem. I cannot run the command in Catalina 10.15.2:

bash-3.2$ ./gu install native-image

It returns me this message: cannot be opened because the developer cannot be verified.

I have tried running
sudo xattr -r -d com.apple.quarantine $GRAALVM_HOME

where

bash-3.2$ echo $GRAALVM_HOME
/Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0/Contents/

with no luck. I cannot run the command.

I have created a thread in Stackoverflow too.

Help, please

UPDATE

I can create the native image running gu command, now it looks like i have to downgrade GRAALVM to 19.2.1. My question, is why do i have to? Why i can`t use 19.3.0?

Answer 10 · 2020-01-22T16:04:16.000Z

@alonsoir I dont known whether it solves you problem but as far as i known the $GRAALVM_HOME directory should point to the Home directory within Contents. Which is not the case in your echo:

bash-3.2$ echo $GRAALVM_HOME
/Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0/Contents/

And @fniephaus also stated that the command should be executed on the root directory of graalvm: /Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0

Answer 11 · 2020-01-22T17:35:11.000Z

Thank you @XanderAtBackboneSystems. I already know it, thats why i introduce the UPDATE message.

Answer 12 · 2021-03-30T11:46:53.000Z

What is the status of this? Are there plans to notarize the Graal packages in the near future?

Answer 13 · 2023-11-01T20:40:36.000Z

In 2019 @fniephaus wrote "In the next release, GraalVM for macOS should be notarized." but the community editions from homebrew at least are still not.