Skip to content

Bazel on mac 10.15 fails with "“bazel-real” can’t be opened because its integrity cannot be verified." #9304

Not planned
@paladox

Description

@paladox

ATTENTION! Please read and follow:

  • if this is a question about how to build / test / query / deploy using Bazel, or a discussion starter, send it to bazel-discuss@googlegroups.com
  • if this is a bug or feature request, fill the form below as best as you can.

Description of the problem / feature request:

When i upgraded to Mac 10.15, bazel stopped working. bazel build release fails with (“bazel-real” can’t be opened because its integrity cannot be verified.)

Bugs: what's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.

  • bazel build release (in the gerrit project)

What operating system are you running Bazel on?

Mac OSX 10.15

What's the output of bazel info release?

Does not work due to "“bazel-real” can’t be opened because its integrity cannot be verified."

(I'm using the packages from https://github.com/bazelbuild/bazel/releases)

I tried upgrading to bazel 0.29, but the installer fails with the same error.

Activity

paladox

paladox commented on Sep 1, 2019

@paladox
Author

Work around is to do:

sudo spctl --master-disable

Which brings backs the option of "Anywhere" to Security & Privacy.

added
area-EngProdBazel CI, infrastructure, bootstrapping, release, and distribution tooling
P1I'll work on this now. (Assignee required)
on Sep 3, 2019
philwo

philwo commented on Sep 4, 2019

@philwo
Member

@paladox I can reproduce this on a test machine with macOS 10.15.

It is because of the new notarization requirement. We will have to find a way how to correctly notarize our release binaries for macOS.

As a workaround, you can download the Bazel installer or binary not using a web-browser, but using "wget" or "curl", which doesn't mark the file as "having been downloaded from the internet", so macOS will not complain:

curl -LO https://github.com/bazelbuild/bazel/releases/download/0.29.0/bazel-0.29.0-installer-darwin-x86_64.sh && bash bazel-0.29.0-installer-darwin-x86_64.sh

You could also install Bazel or Bazelisk using Homebrew, which apparently also works fine.

added
P0This is an emergency and more important than other current work. (Assignee required)
and removed
P1I'll work on this now. (Assignee required)
on Sep 4, 2019
self-assigned this
on Sep 4, 2019
paladox

paladox commented on Sep 4, 2019

@paladox
Author

Ah thanks! I just went for the "sudo spctl --master-disable" option :)

philwo

philwo commented on Oct 9, 2019

@philwo
Member

I think Apple relaxed the requirements here, because I can no longer reproduce this in the final version of macOS 10.15.

Reducing priority due to this, however, we'll of course still work on notarizing our official release binaries. :)

added
P2We'll consider working on this in future. (Assignee optional)
and removed
P0This is an emergency and more important than other current work. (Assignee required)
on Oct 9, 2019
cmooreml

cmooreml commented on Oct 15, 2019

@cmooreml

Good article on how to enable/disable: https://www.imore.com/how-open-apps-unidentified-developers-mac

sudo spctl --master-disable
sudo spctl --master-enable

16 remaining items

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

P2We'll consider working on this in future. (Assignee optional)area-EngProdBazel CI, infrastructure, bootstrapping, release, and distribution toolingstaleIssues or PRs that are stale (no activity for 30 days)team-OSSIssues for the Bazel OSS team: installation, release processBazel packaging, websitetype: feature request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

    Development

    No branches or pull requests

      Participants

      @jin@philwo@markkolich@Splaktar@paladox

      Issue actions

        Bazel on mac 10.15 fails with "“bazel-real” can’t be opened because its integrity cannot be verified." · Issue #9304 · bazelbuild/bazel