[GR-49896] GraalVM not (yet) notarized for macOS Catalina

[fniephaus]

GraalVM should eventually be notarized for macOS. I'm not sure if published releases can be notarized in retrospect, but that'd be great too.

More information: https://developer.apple.com/news/?id=09032019a

Related: https://github.com/graalvm/homebrew-tap/issues/6

[fniephaus]

In the meantime, sudo xattr -r -d com.apple.quarantine /path/to/graalvm should be enough to get you going on macOS Catalina, no need to disable Gatekeeper.

[machi1990]

Hi @fniephaus, I have an error xattr: /xx/xx/graalvm-ce/Contents/Home: No such xattr: com.apple.quarantine when running the command xattr -d com.apple.quarantine $GRAALVM_HOME. Thoughts?

[fniephaus]

@machi1990 you might need to launch GraalVM once...and what if you run it against /xx/xx/graalvm-ce instead of the Home dir?

[machi1990]

and what if you run it against /xx/xx/graalvm-ce instead of the Home dir?

With this I am not seeing the previous error but “gu” cannot be opened because the developer cannot be verified, like the command did not have any effect.

[fniephaus]

Looks like you actually have to run it recursively against GraalVM's root directory: xattr -r -d com.apple.quarantine /xx/xx/graalvm-ce-19.2.0.1

[machi1990]

Looks like you actually have to run it recursively against GraalVM's root directory: xattr -r -d com.apple.quarantine /xx/xx/graalvm-ce-19.2.0.1

Thanks, this seems to do the trick. Running the command as sudo might be required :-)

[fniephaus]

@machi1990 glad it's working for you now!

[machi1990]

Yeah, I am glad too. Let me update the PR that I just tagged you :-)

[alonsoir]

Hi, i think i have the same problem. I cannot run the command in Catalina 10.15.2:

bash-3.2$ ./gu install native-image

It returns me this message: cannot be opened because the developer cannot be verified.

I have tried running sudo xattr -r -d com.apple.quarantine $GRAALVM_HOME

where

bash-3.2$ echo $GRAALVM_HOME /Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0/Contents/

with no luck. I cannot run the command.

I have created a thread in Stackoverflow too.

Help, please

UPDATE

I can create the native image running gu command, now it looks like i have to downgrade GRAALVM to 19.2.1. My question, is why do i have to? Why i can`t use 19.3.0?

[XanderAtBackboneSystems]

@alonsoir I dont known whether it solves you problem but as far as i known the $GRAALVM_HOME directory should point to the Home directory within Contents. Which is not the case in your echo:

bash-3.2$ echo $GRAALVM_HOME /Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0/Contents/

And @fniephaus also stated that the command should be executed on the root directory of graalvm: /Library/Java/JavaVirtualMachines/graalvm-ce-java8-19.3.0

[alonsoir]

Thank you @XanderAtBackboneSystems. I already know it, thats why i introduce the UPDATE message.

[radeusgd]

What is the status of this? Are there plans to notarize the Graal packages in the near future?

[mjaggard]

In 2019 @fniephaus wrote "In the next release, GraalVM for macOS should be notarized." but the community editions from homebrew at least are still not.