Live data from Hacker News

Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

github.com

171–180 of 301 posts

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#171

Homebrew is not really pro in any way: they force updates, deprecate old software that is still widely in use, the maintainers are always very combative and dont allow any discussions or other opinions. In the end it's a package manager for consumers that hand holds you and is not really useful in a pro context. I've been meaning to jump to macports anyway, maybe ill do it now...

> Homebrew is not really pro in any way: they force updates, deprecate old software that is still widely in use, the maintainers are always very combative and dont allow any discussions or other opinions.

No different than Apple themselves!

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#172

Earlier quoted context omitted.

im talking about developers for example, that may need specific/old versions of php or node or whatever, which then get deprecated and uninstallable via brew as soon as they officially reach EOL. Or once installed, get forcefully and inadvertently updated by brew. On the other side is some consumer who uses brew to install youtube downloader and doesnt care about versions/upgrades, etc...

brew install php@X.Y doesn’t work for you? Although I should say that I haven’t tried to go back many major versions, I wonder if they provide 7.x for example.

It works until PHP officially EOLs the version. Then brew stops supporting it and you have to install some finicky 3rd party taps/repos to get the older versions. A huge pain...

In the real world there are still apps running PHP 7.4 and even older!

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#173

Earlier quoted context omitted.

Apple Silicon cannot boot Windows ARM and Apple is dropping boot camp support alongside x86 support in the near future.

> Apple Silicon cannot boot Windows ARM That's totally up to Microsoft… they could done a licensing deal with Apple years ago to enable Windows ARM to run natively on Apple Silicon hardware.

This. It’s technically possible (the same way Asahi uses), but Microsoft has to bring the support in Windows.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#174

Yeah, I’ve been noticing an alarming number of casks marked to be depreciated… at the same time gatekeeper has gotten so restrictive it won’t let me (easily) open a video files that I downloaded from the internet

is there no way to disable this on mac silicon?

Im still on intel, and its ok here, but once I switch, will there be constant headaches and fumbling around because of this?

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#175
post #86

Hehe, the classic rude and mean behavior from homebrew maintainers. I get their motivation to remove the flag. In fact, it has always been better to run xattr in postinstall, this way the binary is free from quarantine even after updates. But the way they communicate with people is unacceptable and just unnecessary.

Reading that discussion, I was very surprised at MikeMcQuaid’s reaction to xtqqczze’s concerns, which were calm, brief, and valid. In response, Mike was a dick.

Maybe it’s totally understandable that being a maintainer for the biggest mac package manager conditions a knee-jerk asshole response in a person.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#176
post #160

Earlier quoted context omitted.

> softwareC # available in nixpkgs, but because nixpkgs maintainers are hardline purists it takes 15 minutes to compile What actually happened is that non free software may not be legal to distribute from nixpkgs caches, so you're on your own with building those. That's not really a purist approach.

Why can't you distribute it from the developer's website?

You can. For example: https://github.com/NixOS/nixpkgs/blob/fde16189feaa6eaa81bcf9...

If something gets built it likely means the sources available in some way, just not opensource. There may be many reasons they're preferred over a binary.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#177

Earlier quoted context omitted.

Apple loves to change which tools they ship, too, it at least have for the last few years as system updates were routinely breaking our build scripts at work, mostly when Apple would replace a GNU tool with a BSD tool without warning i think. I agree though, Finder is a joke, the macOS system preferences has gotten incredibly cluttered and hard to use, the ever stricter code signing and download-opening restrictions…

> Apple loves to change which tools they ship, too, it at least have for the last few years as system updates were routinely breaking our build scripts at work, mostly when Apple would replace a GNU tool with a BSD tool without warning i think. It's a licensing issue; Apple has never shipped GPLv3 software. This has been discussed dozens of times on HN. Of course you can use Homebrew to install a GNU toolchain to you…

Just FYI: macOS has been a BSD-derived operating system from the beginning, using stuff from FreeBSD, OpenBSD and NetBSD on a Mach kernel. It’s a certified UNIX™ operating system.

And because GPLv3 is incompatible with how Apple operates, they ship versions of pre-GPLv3 software like Bash 3.2.

Apple now ships openrsync [1] as a replacement for rsync due to licensing issues.

[1]: https://appleinsider.com/inside/macos-sequoia/tips/what-you-...

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#178

Homebrew is not really pro in any way: they force updates, deprecate old software that is still widely in use, the maintainers are always very combative and dont allow any discussions or other opinions. In the end it's a package manager for consumers that hand holds you and is not really useful in a pro context. I've been meaning to jump to macports anyway, maybe ill do it now...

I know, is there any point in calling it Homebrew anymore when it's like an extension of the App Store?

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#179
post #167

Earlier quoted context omitted.

As someone who migrated from macports to Homebrew, I'd like to see a third option (or maybe re-investigate macports again to see what's changed recently). Homebrew's insistence on leaving OSes behind that they deem to be "too old" is becoming a problem as the years click by. One of the reasons to use third party software and a third party package manager is to avoid Apple's own insistence on abandoning old OSes. Home…

"Homebrew's insistence on leaving OSes behind that they deem to be "too old" is becoming a problem as the years click by" Indeed! I have a VERY usable Macbook Pro from 2015. Even with the newest version supported macOS version (11) Big Sur (which is still quite modern) it doesn't have any binaries for apps, which means it has to compile every single app and dependency. I managed to update to macOS 14 (with the help o…

How much are you willing to donate before concluding it's more efficient to just buy a new MacBook? Even the cheapest models now are faster, more energy efficient and more secure. You don't have to throw the old one away if you can find a use case for running old software but I don't think there are many people running 'power user / developer' like tasks on old hardware, especially if their jobs depend on it.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#180

Earlier quoted context omitted.

Two popular apps mentioned in the earlier discussion in Homebrew repo are Librewolf and Freetube. https://github.com/orgs/Homebrew/discussions/6334

I actually tried to install Librewolf today and it wouldn’t go because of gatekeeper. Ended up on Waterfox instead. Would’ve preferred Librewolf because that’s what I run on my other desktop running Linux but what can you do…

You can still use Librewolf, if you manually remove the quarantine attribute after every update and reboot. It’s very annoying, but at least it’s possible for now

xattr -dr com.apple.quarantine /Applications/LibreWolf.app

Post reply on HN