Remix.run Logo
woodruffw 10 hours ago

> Does this mean people won't be able to use Homebrew to compile software from source (and run it)? Does it mean that they'll be able to use Homebrew to compile software from source, but not download prebuilt binaries (and run them)?

No, and no. This only affects Casks, which are prebuilt .app bundles that Homebrew has no part in building (either locally or remotely). Formulae (source builds) and bottles (builds of formulae within Homebrew) are not directly affected by any of this.

kragen 9 hours ago | parent [-]

Can any random person build things from source, or do they need to be blessed by Apple?

woodruffw 9 hours ago | parent | next [-]

The answer to this is nuanced because of how it works, but the short answer is yes: you can build random things from source and run them, and you can download random binaries from the internet and run them. The only thing that Homebrew itself is changing is that it no longer provides an automatic way to lift the quarantine bit from a specific subset of binary packages (casks).

kragen 9 hours ago | parent [-]

I see, thanks!

dalenw 9 hours ago | parent | prev [-]

For Mac, yes and no. IIRC you don't need a developer's license to build and sign software for yourself. But you do need one to distribute pre-built software.

watermelon0 9 hours ago | parent [-]

You can still run unsigned software, but you need to approve 2? prompts, and also allow exception for every executable by going to Privacy & Security tab in settings.

IIRC there is a CLI command for achieving the same.

saagarjha 6 hours ago | parent [-]

You can’t run unsigned software on Apple silicon. Note that when you build your software if you use Apple’s tools it will inject an ad-hoc signature into the product.

kragen 6 hours ago | parent [-]

That seems like it would interfere with reproducible builds.

saagarjha 6 hours ago | parent [-]

The signature that gets added is vaguely a hash of the binary. You probably want to look at the UUID that gets injected into your binary instead of this.