Add option to skip signing of runtime on macOS
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 52/100
Research direction
Start by tracing NBPackage’s macOS signing path, focusing on where the JDK runtime is deep re-signed. Review the linked mailing-list discussion and the jlink concern, then verify that the new option skips runtime re-signing when requested while preserving the current default and notarization behavior.
Written by the indexing model from the issue text.
Description
By default, NBPackage deep re-signs the whole of the installation payload on macOS. This ensures everything is signed with the hardened runtime and correct entitlements. When first written this proved necessary to pass notarization requirements. This might no longer always be the case, and it can cause subtle issues with things like jlink. See mailing list conversation at https://lists.apache.org/thread/gm8rst0ppmflfg38trdfvglb6dgfjzc3
We should provide an option to skip re-signing of the JDK runtime in certain cases where the user can determine this is unnecessary.
- Dominant language
- Java
- Stars
- 35
- Forks
- 13
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from apache/netbeans-nbpackage
-
Update Windows packaging to support Open With... on filesPossibly taken @geertjanw claimed this 9 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
apache/netbeans-nbpackage#133 ·
All issues in apache/netbeans-nbpackage
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
floci-io/floci#5425 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
objectionary/eo-graphs#80 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
objectionary/jucs#141 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
-
bug good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
repowise-dev/repowise#3335 ·
Maintainers usually reply within 1 day