Re: [platform-dev] MacOS .dmg vs .tar.gz

[Liviu Ionescu <ilg@xxxxxxxxxx>]

> On 10 Nov 2020, at 15:51, Thomas Singer <ts-swt@xxxxxxxxxxx> wrote:
> 
> If the .dmg has been downloaded by a "normal" browser and hence the .dmg has the quarantine attribute, then yes.

Yes, the .dmg is downloaded with Safari. I expected Finder to know that the file is safe and do not add the quarantine attribute. 

But since the Eclipse.app extracted from the .dmg is identical to the one packed as a .tar.gz, and Finder always adds the quarantine attribute to it, what is the difference between the two? 


---

Let me summarise:

- since the very first version of a package including CDT & the GNU MCU Eclipse plug-ins I used only .tar.gz to distribute the Mac binaries
- I never distributed the Mac binaries as .dmg
- the download instructions explicitly mentioned the need to clear the quarantine attribute after download, to avoid problems
- during several years there were thousands and thousands of downloads and I never had a complain about this

Now the project was migrated to the Eclipse Foundation, and distribution should follow the EF procedures.

When I asked Jonah about distributing the project as .tar.gz, he initiated this thread to ask the community.

The answers came immediately: 

- ".tar.gz should be avoided at all cost"
- " to offer a seamless experience to the end users, one have to deliver a .dmg (or .pkg)."
- " it would be best to stick with .dmg. "
- "From the platform point of view, we are planning to stop producing tar.gz. We were using tar.gz for our tests. Recently we moved to use dmg. So not useful for us anymore."

and so on...

Now that the Embedded CDT package is available via SimRel and EPP, and the public download pages currently has links only to .dmg images, I had no other choice than using dmgs. 

And so I discovered that using the the Eclipse.app packed inside the .dmg has no advantage over using the .tar.gz, (curiously still provided by the EPP, but not publicly linked).

I'm trying to make some sense from this situation, but I'm not getting too far...


Regards,

Liviu



> On 2020-11-10 11:01, Liviu Ionescu wrote:
>> Can some other Mac user confirm that Finder adds the quarantine attribute when getting the Eclipse.app from the .dmg?
>> Regards,
>> Liviu
>>> On 7 Nov 2020, at 01:48, Liviu Ionescu <ilg@xxxxxxxxxx> wrote:
>>> 
>>> 
>>> 
>>>> On 7 Nov 2020, at 00:49, Alex Blewitt <alex.blewitt@xxxxxxxxx> wrote:
>>>> 
>>>> How was the dmg created?
>>> 
>>> Good question! I have no idea, by the magic of EPP.
>>> 
>>>> Can you mount it and see if the quarantine bits are in the dmg itself?
>>> 
>>> Sure. They are not.
>>> 
>>> ilg@wks ~ % xattr /Volumes/Eclipse/Eclipse.app
>>> ilg@wks ~ %
>>> 
>>>> If you downloaded it from a tgz, then created a dmg from that, you’d bake in the quarantine flags into the dmg itself.
>>> 
>>> Aaaa... I don't know what to say, I did none of the above, I simply downloaded both the .dmg and the .tar.gz from the Eclipse 2020-12-M2 page.
>>> 
>>>> If you can give me the exact url you downloaded I can verify it for you.
>>> 
>>> Yes, please do so, to compare the results:
>>> 
>>> https://download.eclipse.org/technology/epp/downloads/release/2020-12/M2/
>>> 
>>>> But I have not noticed this behaviour on the Eclipse Platform DMGs so it’s not an issue with either Eclipse or DMGs themselves.
>>> 
>>> I downloaded the files with Safari, as usual, and the files ended in ~/Downloads.
>>> 
>>> When I extracted Eclipse.app from the .dmg I used drag & drop from the mounted window into another window where ~/tmp was opened. I don't think this is unusual, actually this is what most users will do.
>>> 
>>> The quarantine attribute seems to be added by Finder when copying Eclipse.app from the .dmg to any folder, either in my user folders or in /Applications, after authentication.
>>> 
>>> macOS 10.15.7.
>>> 
>>> 
>>> Regards,
>>> 
>>> Liviu
>>> 
>> _______________________________________________
>> platform-dev mailing list
>> platform-dev@xxxxxxxxxxx
>> To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev
> _______________________________________________
> platform-dev mailing list
> platform-dev@xxxxxxxxxxx
> To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev