Hi!
On Fri, Apr 24, 2020 at 9:19 PM Tres Finocchiaro <
tres finocchiaro gmail com> wrote:
he had issues with the new "hardening" rules of macOS
Although I'm very familiar with notarization and stapling
<https://stackoverflow.com/a/53528020/3196753>, the hardened
runtimes require a much deeper understanding of C++, so my efforts would
likely be futile.
Normally our builds now are notarized, signed and whatnot (I
understand there are several security layers?) nowadays. We use the Apple
ID of GNOME (contact Neil McGovern). If needed at some point, we can put
you in contact.
I see the build system is 10.9+ (notarization requires a minimum of
10.9, so this is good) however in my experience, the dependencies are a
nightmare when targeting older macOSs. My strategy has been to chain a
bunch of custom steps
<https://github.com/LMMS/lmms/wiki/Dependencies-MacOS#108-custom-steps> although
I'm curious how this is done using Gimp. At a glance, it appears (perhaps)
the dependency listing is simpler. I see a macos-specific gtk script, that
must be doing a lot of the work.
Yeah it's based on: https://gitlab.gnome.org/GNOME/gtk-osx
Alex had a GIMP-specific fork:
https://gitlab.gnome.org/samm-git/gtk-osx/tree/gimp
But it's all written in the README, so you probably read it already.
As for the minimum system, initially we were targetting 10.10+ (we try
to not support OS even unsupported by their developers, i.e. here Apple.
And actually even 10.10 is not supported anymore by now, according to
Wikipedia). Cf.
https://gitlab.gnome.org/GNOME/gimp/-/blob/gimp-2-10/devel-docs/os-support.txt
But (if I recall) Alex was saying that supporting 10.9 was not much
more difficult so we kept as-is at least until things ended up impossible
(in which case we'd bump up the requirement).
There is also the fact that each time we drop support for an older
Windows or macOS, we get a lot of hate from people. Of course this doesn't
stop us but still. Let's say that if we have no reason to break support
(i.e. doesn't make our life harder), why do it? 🙂
This being said, if our macOS contributor(s) consider that we have to
drop support of old version X or Y of macOS for whatever good reason, we'll
just do it. The doers are basically maintainers of their own part. 😉
I spot some similarities, such as upstream bugs with otool tools
<https://github.com/jralls/gtk-mac-bundler/pull/10>, leveraging a 3rd
party dmg creator <https://github.com/andreyvit/create-dmg> (I've
used app-dmg instead) but at a glance, the build system appears to be
completely automated including signing and notarizing.
I think it is, since I can see steps "Importing signing certificate",
"Creating DMG package" and "Notarizing DMG package" in the CI.
If testing the installer is the next steps before publishing, I can
offer that by fetching the URL from the CI logs.
I indeed know the DMG is made available on CircleCI and can be
downloaded in the "Artifacts" tab of builds. Maybe you'd need an account to
see this, no idea. Do you see the DMG link?
I'm only a casual Gimp user though, so I'd be weary of passing a
build as good on instinct alone. Do you have a QC spreadsheet or is it
more of a best-effort basis?
To be clear, we have no idea. If this is not in the repository, it
means that either Alex had not documented it (yet?) or it was just in his
head. He has been the only one working on GIMP on macOS for like the last 2
years (and before him, we had another contributor who was also alone for
many years; it seems we never manage to get more than 1 macOS dev at a
time! 😕).
I guess you could start creating a QC steps howto and contribute it to
the repo once you are done. :-)
Sorry to not be of much help, but this is just how much we know
nothing macOS-related.
Alex's notes are stellar btw.
Nice to read. He did put a lot of time and effort on this. We are
extremely thankful to him (and to any contributor for that matter!).
Note, I use Gimp on macOS Catalina Developer Beta so I'll know right
away if the app or a particular feature is blocked and I'm more likely to
have stricter (beta) hardening as Apple makes changes to the OS.
Cool. :-)
Jehan
-Tres
- Tres Finocchiaro gmail com
On Fri, Apr 24, 2020 at 2:55 PM Jehan Pagès <
jehan marmottard gmail com> wrote:
Hi Tres,
On Fri, Apr 24, 2020 at 7:34 PM Tres Finocchiaro <
tres finocchiaro gmail com> wrote:
Jehan,
I'm the macOS packager for LMMS. I might be able to help out in
his absence. LMMS is written in Qt, so the dependency stack is much
different than Gimp which is Gtk, but if there's a documented build process
via MacPorts or Homebrew, I can take a swing at it.
I know there are non-official MacPorts and Homebrew because it's
written on our website. So these can be good references indeed.
Ideally we want the build scripts to be public and the build itself
to also be public (not happen on someone's computer for obvious reasons).
This is why Alex (our macOS contributor) has done a lot of work on the
build repository:
https://gitlab.gnome.org/Infrastructure/gimp-macos-build
It would be nice if continuing work were to happen on this same
repository.
As for the build itself, it was happening on some CI service called
CircleCI (because macOS builds can be done there, unlike the GNOME Gitlab
CI machines). Builds are there:
https://circleci.com/gh/GNOME/gimp-macos-build
Note: you'll notice that there are builds for GIMP 2.10.18 there,
which was from last time Alex was working on it. We don't really know the
state and in particular if these builds done 2 months ago work well and
safely, since none of us (but Alex) even has an Apple machine so we cannot
test and won't recklessly make public completely untested DMG packages.
Last we heard from Alex, he had issues with the new "hardening"
rules of macOS. Basically it made it impossible to run a debugger (lldb),
which is what GIMP tries to do to self-debug when it crashes or encounter
critical errors (a debug feature introduced in GIMP 2.10).
I'm not sure he actually fixed it before going off-radar. If he
didn't and the solution is too complicated, a possibility is to not care
about this self-debugging feature of course. It's annoying if it doesn't
work (because it makes reporting/fixing bugs easier), but it is better to
have a package without the feature than none obviously. :-)
In any case, we will definitely welcome the help. Feel free to look
at the scripts and propose patches/merge requests. I'm not sure if an
access is needed to CircleCI project to see the build details (artifacts,
logs and whatnot). Maybe just connecting with a github account is enough.
If not, we'll try to figure this out.
Oh and last thing, if you have questions, the #gimp IRC channel on
irc.gimp.org is a good place where you can find most developers.
Thanks!
Jehan
Credentials: https://github.com/LMMS/lmms/pull/2271
-Tres
- Tres Finocchiaro gmail com
On Fri, Apr 24, 2020 at 1:11 PM Jehan Pagès via gimp-user-list <
gimp-user-list gnome org> wrote:
Hello,
On Fri, Apr 24, 2020 at 8:16 AM Maurizio Loreti via gimp-user-list
<
gimp-user-list gnome org> wrote:
Any foresight for an implementation of GIMP 2.10.18 for MacOS?
[I mean
official, not MacPorts (that uses XQuartz) nor Partha's].
Isn't it you who already asked at least twice the same thing? The
answer is
still the same as we told you several times already. Our (unique!)
macOS
contributor has not been available for like more than a month. And
to be
fair, I don't care as much about the macOS version of GIMP as I am
worried
about this contributor and hoping he (and his family) is still
fine as we
get no news.
Since you knew already about the situation, a bit of compassion
would not
be a bad thing.
If GIMP has problems with MacOS, what are these problems?
Isn't *no contributor* enough of a problem by itself? The problem
is that
nobody seem to care enough to help this package happen (only
enough to
**ask** for it apparently). We have called for contributors so
many times
over the years (and again recently, so much there has even been a
French
specialized mac-news website who relayed the call a few weeks
ago!).
This contributor could be you if you want to help packaging!
The current version of scripts are there:
https://gitlab.gnome.org/Infrastructure/gimp-macos-build
There are only 3 possible outcomes:
1/ This contributor finally comes back and he continues *alone* 😢
to do
all the mac packaging.
2/ Other people finally show they care by contributing.
3/ A mix of 1/ and 2/ which is the best outcome!
In none of these scenarios just asking without contributing helps
in any
way.
Thanks for either helping or understanding. 🙂
Jehan
--
Maurizio Loreti -- Maurizio Loreti gmail com
_______________________________________________
gimp-user-list mailing list
List address: gimp-user-list gnome org
List membership:
https://mail.gnome.org/mailman/listinfo/gimp-user-list
List archives: https://mail.gnome.org/archives/gimp-user-list
--
ZeMarmot open animation film
http://film.zemarmot.net
Liberapay: https://liberapay.com/ZeMarmot/
Patreon: https://patreon.com/zemarmot
Tipeee: https://www.tipeee.com/zemarmot
_______________________________________________
gimp-user-list mailing list
List address: gimp-user-list gnome org
List membership:
https://mail.gnome.org/mailman/listinfo/gimp-user-list
List archives: https://mail.gnome.org/archives/gimp-user-list
--
ZeMarmot open animation film
http://film.zemarmot.net
Liberapay: https://liberapay.com/ZeMarmot/
Patreon: https://patreon.com/zemarmot
Tipeee: https://www.tipeee.com/zemarmot
--
ZeMarmot open animation film
http://film.zemarmot.net
Liberapay: https://liberapay.com/ZeMarmot/
Patreon: https://patreon.com/zemarmot
Tipeee: https://www.tipeee.com/zemarmot
