[Vm-dev] [squeak-dev] Squeak 6 on Mac

Thu Jul 7 07:37:49 UTC 2022

Hi Eliot --

> Look, the issue isn't whether I can do the right thing or not. The issue is that new users
> on the Mac will download via the website, likely just as I did, and they will get something
> that doesn't work.  So instead of telling me what the right thing to do is, update the Web
> site so that people going there can do the right thing.

I updated the instructions on https://squeak.org/downloads [https://squeak.org/downloads]. Normal users will not use "mv" but rather drag-and-drop. That's why this is a non-issue if you download the .dmg file. For the AIO-ZIP, yes, that auto-extract to ~/Downloads is tricky. From there, you must "do the drag" and not use "mv". Then it works.

Also keep your .sources file either besides the .image or the .app or the binary. There is no automatic lookup into the .app bundle's resources folder from the outside.

Best,
Marcel
Am 06.07.2022 18:33:15 schrieb Eliot Miranda <eliot.miranda at gmail.com>:

On Tue, Jul 5, 2022 at 10:08 PM Tobias Pape <Das.Linux at gmx.de [mailto:Das.Linux at gmx.de]> wrote:

Hi Eliot

> On 6. Jul 2022, at 00:24, Eliot Miranda <eliot.miranda at gmail.com [mailto:eliot.miranda at gmail.com]> wrote:
>
[...]
> >
> > I'm not using the DMG.  I downloaded the all-in-one, and moved it.

judging from the path below, yes you moved it, but not _out of_ anything in ~/Downloads ...

Yes I did.  My downloads folder is ~/Downloads.
My Squeak folder is ~/Squeak.
Safari downloaded Squeak6.0-22101-64bit-All-in-One.zip to Dowenloads, unpacked it to ~/Downloads/Squeak6, and moved the zip to the trash folder (~/.Trash)
I moved Squeak6 to Squeak ($ mv ~/Downloads/Squeak6 ~/Squeak) and ran it there.

Look, the issue isn't whether I can do the right thing or not.  The issue is that new users on the Mac will download via the website, likely just as I did, and they will get something that doesn't work.  So instead of telling me what the right thing to do is, update the Web site so that people going there can do the right thing.

>
> In that case, I really wonder what's going on.
> Can you give me the output of
>
> ls -le@ Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak [http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak]
> 
> Squeak$ ls -le@ Squeak6/Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak [http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak]
> -rwxr-xr-x@ 1 eliot  staff  4100688 Jul  4 16:30 Squeak6/Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak [http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak]
> com.apple.quarantine      57

This quarantine will trip of Translocation

> Squeak$ ls -le@ Squeak6/Squeak6.0-22101-64bit-All-in-One.app [http://Squeak6.0-22101-64bit-All-in-One.app]
> total 0
> drwxr-xr-x@ 10 eliot  staff  320 Jul  4 16:32 Contents
> com.apple.quarantine 57
> 
>
> xattr -l Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak [http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak]
>
> Squeak$ xattr -l Squeak6/Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak [http://Squeak6.0-22101-64bit-All-in-One.app/Contents/MacOS/Squeak]
> com.apple.quarantine: 0083;62c487a3;Safari;2D1FCF49-69DA-447C-BA51-16CC663654C4
>
> Squeak$ xattr -l Squeak6/Squeak6.0-22101-64bit-All-in-One.app [http://Squeak6.0-22101-64bit-All-in-One.app]
> com.apple.quarantine: 0083;62c487a3;Safari;2D1FCF49-69DA-447C-BA51-16CC663654C4
>
>
> xattr -l $PATH_OF_THE_DOWNLOADED_THING
>
> xattr -l ~/Downloads/Squeak6
> com.apple.quarantine: 0083;62c4b913;Safari;90386985-D5B9-4492-AF0B-766931630126
>
> Squeak$ xattr -l ~/Downloads/Squeak6/Squeak6.0-22101-64bit-All-in-One.app [http://Squeak6.0-22101-64bit-All-in-One.app]
> com.apple.quarantine: 0083;62c4b913;Safari;90386985-D5B9-4492-AF0B-766931630126

Same.

Can you please try again:
 * unzip
 * move the AIO somewhere _not_ below ~/Donwloads a

and check that xattr or ls -le@ on the binary do not contain the quarantine?

> 
>
> please?
>
>
> >
> > (this is unavoidable.)
> >
> > Have you got a pointer to the relevant documentation?
>
> Apple is scarce on any usable stuff lately…
>
>
> >  Do I have to duplicate the Squeak6 directory?
>
> you should not, if you moved stuff, macOS should have disabled translocation -.-
>
> Lapcatsoftware has old info:
>         https://lapcatsoftware.com/articles/app-translocation.html [https://lapcatsoftware.com/articles/app-translocation.html]
>
> Here's someone avoiding translocation via some exploit, hence not recommendable:
>         https://www.synack.com/blog/untranslocating-apps/ [https://www.synack.com/blog/untranslocating-apps/]
>
> Forum says signing the dmg or bundle helps (https://developer.apple.com/forums/thread/133743 [https://developer.apple.com/forums/thread/133743]):
> "
> >Another solution is to sign the .dmg file too, that should avoid app translocation if I remember correctly.
> Right.
> "
>
> This I can help with.  We have to do this for Virtend.  We sign both the app bundle and the DMG.  I guess one can also sign a zip for the all-in-one (since one uploads a zip containing either the app bundle or the dmg).

Cool, maybe the signing helps.
But let's first make sure the translocation does not happen when the fresh bundle is moved out of the "contaminated" location.

Best regards
        -Tobias

>
>
> We probably have to be tighter in stuff, I just found a "howto":
> - https://developer.apple.com/forums/thread/701581#701581021 [https://developer.apple.com/forums/thread/701581#701581021]
> - https://developer.apple.com/forums/thread/701514#701514021 [https://developer.apple.com/forums/thread/701514#701514021] (for signing or so…)
>
>
> :( yay more work.
>
> I have scripts etc.  So LMK
>
>
> Best regards
>         -Tobias
>
> thanks!
>
> >
> > Best regards
> >         -Tobias
> > >
> > > Best,
> > > Marcel
> > >> Am 05.07.2022 21:03:47 schrieb Eliot Miranda <eliot.miranda at gmail.com [mailto:eliot.miranda at gmail.com]>:
> > >>
> > >> Hi all,
> > >>
> > >>     apologies for raining on the parade. Here's what I get when I either launch the Squeak6 app bundle or drop an image on it.  How can this be fixed?  It's not a good default.
> > >>
> > >> 
> > >> <image.png>
> > >> _,,,^..^,,,_
> > >> best, Eliot

--

_,,,^..^,,,_

best, Eliot
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/vm-dev/attachments/20220707/90a6dd35/attachment.html>