FedoraQt / MediaWriter

Fedora Media Writer - Write Fedora Images to Portable Media
GNU General Public License v2.0
715 stars 154 forks source link

MacOS Arm - FMW 5.0.9 is damaged and can't be opened #678

Closed ghost closed 8 months ago

ghost commented 9 months ago

On attempting to launch FMW I receive the error:

“FedoraMediaWriter.app” is damaged and can’t be opened. You should move it to the Trash."

At first I installed via homebrew and later I removed and re-downloaded the arm build from the 5.0.9 assets directly. I still receive the error.

grulja commented 9 months ago

Does the non-arm build work for you instead? I sadly have no way to verify it since my only MacBook is still intel based.

arif-desu commented 8 months ago

Hey I tried using it. It works. Need to remove the quarantine attribute from downloaded image. xattr -r -d com.apple.quarantine FedoraMediaWriter.app Absolutely not my preferred way to run binaries on my computer.

Would appreciate if you could provide a signed and notarized binary for ARM mac since Gatekeeper doesn't really like the current build and reports as damaged.

ghost commented 8 months ago

@parasaito , this allowed the app to launch. I'm a bit apprehensive on why/how though. I'm not familiar with xattr -r -d and am not sure of it's implications. Thanks!

arif-desu commented 8 months ago

@NullBadger Every executable file you download via a browser on macOS is given the quarantine attribute. Gatekeeper verifies if the binary is signed and notarized when you first load the executable. This FMW image is currently neither signed nor notarized currently, and that's why gatekeeper prompts it might be damaged (notarization requires getting an Apple developer account subscription).

You can check such things with Apparency

Here's the preview for FMW 5.0.9 :

Screenshot 2024-02-05 at 10 10 43 AM

Here's another app that's notarized :

image

The xattr -r -d recursively deletes the quarantine extended attribute from the disk image so gatekeeper check is bypassed. That's all. I do not condone it's use blindly on any app, only use it on apps you trust.