<div dir="ltr"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"></blockquote><div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Hi Ben</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Thanks for the quick responses particularly on the weekend before your vacation.</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">you wrote:</div><br><blockquote style="margin:0 0 0 40px;border:none;padding:0px">What happens<br>if you try to install to do something like (in the extracted binary distribution),</blockquote><br><blockquote style="margin:0 0 0 40px;border:none;padding:0px"> $ ./configure --prefix=`pwd`/tmp<br> $ make install # this will fail<br> $ xattr -rc .<br> $ make install # perhaps this will finish successfully?<br> # tmp/bin/ghc --version # GHC should be usable<br><br></blockquote><br><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">success on both my machines using a slightly modified version of your suggestion above for 21506:</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"> ./configure --prefix=`pwd`/tmp # specifying ./tmp seems to be critical</div></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">xattr -rc . # seems to be necessary also</div></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">sudo make install # seems to works , output ends with "recache"</div></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">./tmp/bin/ghc --version # success , although admittedly the smallest smoke test possible</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div></blockquote><font face="times new roman, serif" size="4"><span class="gmail_default" style="font-family:"times new roman",serif;font-size:large">You wrote:</span></font></div><div><font face="times new roman, serif" size="4"><br></font></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div>></div><div>Ultimately I think we may just need to bite the bullet and start</div><div>properly notarising/codesigning releases (resolving #17418). At this point we have</div><div>spent more time trying to avoid the notarisation requirement than</div><div>it would likely take to satisfy it. Unfortunately, this will require</div><div>that I find an Apple device somewhere which may take a few weeks.</div></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><br></div><div>I'm afraid I am on holiday next week but I would quite grateful if we</div><div>could arrange for a chat after I return such that we can debug this in</div><div>realtime.</div></blockquote><div><br></div><div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Sure, we can chat when you return from your vacation.</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Not sure if it is worth trying to fix the release on the basis of what I write above. My opinion is: it is if we can get reports of at least one other person having this issue. I am fine with not doing this for 9.4.1</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">I agree that we should raise the priority of "notarising/codesigning releases (resolving #17418)". My opinion is that it is not worth delaying 9.4.1 for this.</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Have a great vacation.</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">Cheers</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large">George</div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><br><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"><br></div><div class="gmail_default" style="font-family:"times new roman",serif;font-size:large"></div></blockquote><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jul 24, 2022 at 11:33 AM Ben Gamari <<a href="mailto:ben@well-typed.com">ben@well-typed.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">George Colpitts <<a href="mailto:george.colpitts@gmail.com" target="_blank">george.colpitts@gmail.com</a>> writes:<br>
<br>
> +Kazu Yamamoto <<a href="mailto:kazu@iij.ad.jp" target="_blank">kazu@iij.ad.jp</a>><br>
><br>
> Hi Ben<br>
><br>
> My 2 machines also have:<br>
><br>
> $ spctl --status<br>
> assessments enabled<br>
><br>
Hmm, interesting. Then I am truly perplexed.<br>
<br>
> Speculations:<br>
><br>
> /usr/local/lib/ghc-9.4.0.20220721/bin/../lib/x86_64-osx-ghc-9.4.0.20220721/libHSterminfo-0.4.1.5-ghc9.4.0.20220721.dylib<br>
> is created after xattr -rc . was run so it doesn't have the necessary<br>
> attributes. Is it possible that ghc developers and/or the test machines<br>
> have this file on another of the paths in the error message and that is why<br>
> it works for them?<br>
><br>
I'm not sure where this would be but at this point anything is possible. What happens<br>
if you try to install to do something like (in the extracted binary distribution),<br>
<br>
$ ./configure --prefix=`pwd`/tmp<br>
$ make install # this will fail<br>
$ xattr -rc .<br>
$ make install # perhaps this will finish successfully?<br>
# tmp/bin/ghc --version # GHC should be usable<br>
<br>
> I hope I didn't offend you by asking if the fix had been tested; I assume<br>
> it had been but I thought it was important to rule that out.<br>
><br>
Not to worry; it's a very reasonable question to ask given the circumstances.<br>
<br>
> More than happy to test. I really appreciate all the work you and others<br>
> have put into GHC !<br>
><br>
Ultimately I think we may just need to bite the bullet and start<br>
properly notarising/codesigning releases (resolving #17418). At this point we have<br>
spent more time trying to avoid the notarisation requirement than<br>
it would likely take to satisfy it. Unfortunately, this will require<br>
that I find an Apple device somewhere which may take a few weeks.<br>
<br>
I'm afraid I am on holiday next week but I would quite grateful if we<br>
could arrange for a chat after I return such that we can debug this in<br>
realtime.<br>
<br>
Cheers,<br>
<br>
- Ben<br>
</blockquote></div></div></div>