Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

github.com

Post reply on HN
Print view View original

91–100 of 301 posts

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#91

Post by alwillis »

pxc wrote: post #59
devkit1 wrote: post #24

If I understand the issue correctly, it appears that this change primarily impacts casks on macOS. In fact it looks like it may only impact casks. Casks are used to install binary packaged software, often in the form of a dmg or pkg file on macOS. Most people I know are not installing too many casks, and most of the ones I've seen install signed binaries anyway. The important thing for me with this is that it doesnt…

> Most people I know are not installing too many casks Casks are the only things Homebrew does that some other package manager available on macOS doesn't reliably do better. Nix, Pkgsrc, MacPorts, and (and now Spack) all have better fundamental designs; sane, multi-user-friendly permissions; and enough isolation from the base system that they break neither each other nor manually-installed software. I use Homebrew ex…

> Most people I know are not installing too many casks

I did a wipe and install of Tahoe like 2–3 weeks ago and used a Brewfile [1] I've had for years to install ~30 casks via Homebrew, including from the App Store, not to mention 50-60 formulas.

As of today, I have 44 casks.

[1]: https://docs.brew.sh/Brew-Bundle-and-Brewfile

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#92

Post by haunter »

Funny/sad to see this post just under the

"Install your own apps, or even another operating system. Who are we to tell you how to use your computer?"

Turns out you can be both consumer friendly AND have a wildly successful app store. Who knew?!

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#93

Post by knowitnone3 »

simonw wrote: post #37
tacker2000 wrote: post #31

Earlier quoted context omitted.

im talking about developers for example, that may need specific/old versions of php or node or whatever, which then get deprecated and uninstallable via brew as soon as they officially reach EOL. Or once installed, get forcefully and inadvertently updated by brew. On the other side is some consumer who uses brew to install youtube downloader and doesnt care about versions/upgrades, etc...

If you are a developer who needs a specific old version of PHP or Node or whatever and you're not using Docker then I have great news for you on how you can solve your problem.

so don't use brew at all? Great, what else should we not use?

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#94

Post by alwillis »

guelo wrote: post #72
devkit1 wrote: post #24

If I understand the issue correctly, it appears that this change primarily impacts casks on macOS. In fact it looks like it may only impact casks. Casks are used to install binary packaged software, often in the form of a dmg or pkg file on macOS. Most people I know are not installing too many casks, and most of the ones I've seen install signed binaries anyway. The important thing for me with this is that it doesnt…

casks are mostly for GUI or other apps that need special installation like setting up background services. I've seen it used for IT laptop provisioning to automate the installation of things like Chrome, Slack, Visual Studio, from the command line.

Casks save so much time compared to the normal way of installing Mac apps regardless of any background services.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#95

Post by zbentley »

pjerem wrote: post #80
cweagans wrote: post #64

Earlier quoted context omitted.

I'm not sure what you're talking about. Their bootloader explicitly supports other OSes. They make it easy to run Windows (even through a built-in app that helps you set it up). There are plenty of reasons to criticize Apple, but they literally don't do anything to prevent you from running another OS.

> Their bootloader explicitly supports other OSes That’s true but that’s probably only so that it wouldn’t have been a subject when Apple Silicon Macs were released because Intel Macs weren’t locked. In reality, the bootloader isn’t closed (yet) but the hardware is so much undocumented that it’s easy to understand that Apple doesn’t want anything else than their OS on your mac. The « alternative os » situation is act…

Eh, you may be right, but there's a big difference between "they are going to forbid other OSes by placing a software restriction where they explicitly permit things now" and "they already effectively forbid other OSes by not publishing developer documentation for proprietary hardware"--that's a tall order, and not a bar that many other hardware manufacturers meet either.

Like, could they lock down the bootloader? Sure. But that's effort they'd have to put in for minimal benefit at the moment. Opening up their hardware would be a lot more effort for questionable benefits (to Apple).

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#96

Post by JCattheATM »

bbkane wrote: post #33
seanparsons wrote: post #4

My longstanding prediction that Gatekeeper will ever so slowly tighten so that people don't realise like a frog boiled in water is continuing to be true.

Fortunately, Linux laptops are getting better and better. I'm hopeful that by the time my M1 macBook Air gets slow enough to annoy me (maybe a year or two from now?), I'll be able to smoothly transition to Linux. I've already done it on the desktop!

> by the time my M1 macBook Air gets slow enough to annoy me (maybe a year or two from now?)

It should be good for at least 5 years from now, if not more.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#97

Post by rezonant »

dylan604 wrote: post #85
saghm wrote: post #45

Earlier quoted context omitted.

> The important thing for me with this is that it doesnt appear to impact homebrew's ability to download, compile, and install open source software. And that is the main thing I use homebrew for. I believe that is true for most people too FWIW I don't think brew has been compiling on installation even open source things by default for a while now[1]: > Homebrew provides pre-built binary packages for many formulae. Th…

You can tell this in how fast things "pour". There's no way things are compiling from source that fast.

Sigh, I'm so over homebrew's hipster rubyist brewery analogy

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#98

Post by queenkjuul »

cweagans wrote: post #64
marcodiego wrote: post #43

Earlier quoted context omitted.

Apple does not support running other OS's on their hardware. This is bad in many senses but it is specially bad since it weakens competition and reduces incentives for Apple to improve their own OS, meaning it is bad even for their users in the long run. If you choose to buy hardware from apple, you must consider that you're encouraging a behaviour that is bad for everyone, including yourself.

I'm not sure what you're talking about. Their bootloader explicitly supports other OSes. They make it easy to run Windows (even through a built-in app that helps you set it up). There are plenty of reasons to criticize Apple, but they literally don't do anything to prevent you from running another OS.

Apple Silicon cannot boot Windows ARM and Apple is dropping boot camp support alongside x86 support in the near future.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#99

Post by asdff »

ryandrake wrote: post #44
tacker2000 wrote: post #14

Homebrew is not really pro in any way: they force updates, deprecate old software that is still widely in use, the maintainers are always very combative and dont allow any discussions or other opinions. In the end it's a package manager for consumers that hand holds you and is not really useful in a pro context. I've been meaning to jump to macports anyway, maybe ill do it now...

As someone who migrated from macports to Homebrew, I'd like to see a third option (or maybe re-investigate macports again to see what's changed recently). Homebrew's insistence on leaving OSes behind that they deem to be "too old" is becoming a problem as the years click by. One of the reasons to use third party software and a third party package manager is to avoid Apple's own insistence on abandoning old OSes. Home…

Honestly conda does a lot of heavy lifting for me. I know people have strong feelings about it on here but it works great for my purposes.

Re: Homebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software

#100

Post by dylan604 »

rezonant wrote: post #97
dylan604 wrote: post #85

Earlier quoted context omitted.

You can tell this in how fast things "pour". There's no way things are compiling from source that fast.

Sigh, I'm so over homebrew's hipster rubyist brewery analogy

[flagged]
Post reply on HN