Skip to content

emrg: fix v0.2.78 build — entitlements plist comment breaks codesign AMFI + Windows smoke cleanup file-lock failure#975

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
argszero merged 1 commit into from
Aug 25, 2026
Merged

emrg: fix v0.2.78 build — entitlements plist comment breaks codesign AMFI + Windows smoke cleanup file-lock failure #975

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 0 additions & 8 deletions packaging/assets/python-entitlements.plist
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -2,14 +2,6 @@
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<!-- rant 2026-08-25 (journal R2 scipy ILP blocked): the bundled python is
Developer ID signed with hardened runtime (--options runtime) but WITHOUT
this entitlement, so macOS library validation blocks loading ANY
pip-installed C extension (.so) — "mapping process and mapped file have
different Team IDs" — numpy/scipy/mypyc all fail to import even inside a
working venv. This entitlement is the standard plugin-loading allowance;
notarization accepts it. Applied to the python interpreter binaries only
in packaging/make-installer.sh (dylibs/so do not need it). -->
<key>com.apple.security.cs.disable-library-validation</key>
<true/>
</dict>
Expand Down
7 changes: 6 additions & 1 deletion packaging/smoke-test.sh
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,12 @@ INSTALL_ROOT="${1:-$ROOT/dist/runtime}"
PASS=0; FAIL=0

smoke_home="$(mktemp -d)"
trap 'rm -rf "$smoke_home"' EXIT
# 红线守卫（rant 2026-08-25T10:38:34 / MANIFESTO 第四条附则二）：绝不以任何形式
# stop/restart daemon。临时 daemon（步骤 2 自起）在 Windows 上仍持有
# $HOME/.emrg/emrgd.log 等文件句柄 → 此处 rm 可能 "Device or resource busy"；
# 2>/dev/null || true 使清理尽力而为（失败不改变退出码），残留临时 HOME 由
# CI runner 的 orphan-process 清理兜底，本机由 56031 端口守卫降级兜底。
trap 'rm -rf "$smoke_home" 2>/dev/null || true' EXIT
export HOME="$smoke_home"
mkdir -p "$HOME/.emrg"
# R114: Windows 下经 cmd 启动的原生 python.exe 不认 Git Bash 的 $HOME —
Expand Down
Loading