Comments (14)
I only found this issue after creating this PR for homebrew-cask
, but the homebrew-cask maintainers did accept this project as is.
anyone can now install the openlens binaries from this repo via brew install --cask openlens
from openlens.
A new tap for just one app sounds overkill, if it requires two commands by the end user (add tap, then install)?
You can install from taps hosted on GitHub in a single command, as long as the repo name starts with homebrew-
. For example, I have a GitHub repo called homebrew-personal
, and anyone can install formulae from it using
brew install carlocab/personal/foo
Are there any obvious benefit with defining a new tap?
You get more control over your cask, which some developers prefer. This also means you don't need to meet any of the requirements for inclusion into a Homebrew-owned repository.
from openlens.
Got it. Also according to https://docs.brew.sh/Acceptable-Casks this will be an "Unofficial" binray, which will not be approved as a main cas anyway:
An allegedly unmodified compiled binary, by a third-party, of a binary that has no existing build by the owner of the source code.
Thus the tap route is probably the way to go, as it is unlikely that we'll be able to persuade Mirantis to publish official binaries for the open source version, even if we submit a PR for it :(
from openlens.
Just a few notes:
What you created is actually a cask (installs a pre-built artefact, only works on macOS) rather than a formula (typically built from source, can work on both macOS and Linux).
As for the notability requirement, you can always host your cask in your own tap (a Git repo that contains casks/formulae).
Here are some docs to help you get started:
https://docs.brew.sh/Taps
https://docs.brew.sh/Interesting-Taps-and-Forks
https://docs.brew.sh/How-to-Create-and-Maintain-a-Tap
https://brew.sh/2020/11/18/homebrew-tap-with-bottles-uploaded-to-github-releases/
from openlens.
A new tap for just one app sounds overkill, if it requires two commands by the end user (add tap, then install)? Are there any obvious benefit with defining a new tap?
Since we need a signed Mac App, I think a Cask is the right way to go, as it will pull the pre-built (and signed) DMG file from our release repo.
My note above about Universal Binary is false though, so it is x86. As soon as GitHub Actions can build arm, then we can add the arm64 variant.
from openlens.
A formula that builds from source can likely be made acceptable for inclusion in homebrew-core
. Just FYI. But you can, of course, choose to host your own cask instead of or in addition to a formula.
from openlens.
Can you make a formula sign the Mac binaries? Where would you place the signing certificate?
from openlens.
I don't think there's any precedent of a Homebrew formula signing Mac binaries. You could have the formula download a signing certificate as a resource and use it to sign the binary, but I see no benefit to this approach compared to just distributing a binary that is already signed.
Homebrew does perform "on-the-fly" signing of CLI applications (distributed as formulae) but my understanding is that this ad-hoc signing works differently for apps.
In any case, I think cask is probably the path of choice here. Formulae are usually CLI apps (can't install outside of the Homebrew prefix, so can't install e.g. to /Applications
). Neither provides a solution to the issue of the app being untrusted/unsigned.
from openlens.
@janhoy What about https://github.com/ykursadkaya/homebrew-openlens? I've been using it right after openlens came to live. Does your formula add any other improvements over ykursadkaya's one?
from openlens.
@janhoy What about https://github.com/ykursadkaya/homebrew-openlens? I've been using it right after openlens came to live. Does your formula add any other improvements over ykursadkaya's one?
Have you tried it? Do they build and sign their own binaries or use the one from this repo?
from openlens.
@janhoy What about https://github.com/ykursadkaya/homebrew-openlens? I've been using it right after openlens came to live. Does your formula add any other improvements over ykursadkaya's one?
Have you tried it? Do they build and sign their own binaries or use the one from this repo?
I'm using it ever since it was created without any issues. The artifacts aren't signed tho, that's a good point!
For me personally that was never a big issue since I've just allowed the execution.
from openlens.
Is this still a thing ? Homebrew produces unsigned packages.
And seems this will not be added to mainstream tap, so what is the situation here ?
from openlens.
I provided one homebrew Cask here:
https://github.com/jkroepke/homebrew-openlens
brew install jkroepke/openlens/openlens
Homebrew produces unsigned packages.
This is not true. Local builds are always signed with an ad-hoc signature. Cask (with will use pre-build binaries from this repository), are not touched by brew. But this is not a problem, since the pre-build binaries are already signed.
from openlens.
@MuhammedKalkan If you want, you can link it in the README.md and close this issue. Since homebrew TAP must be beginn with homebrew-
, we are not able to merge the homebrew file into this repository. A Long term solution would be a dedicated GitHub Organization (e.g. openlens-redistribution) where we can put both repositories into it.
from openlens.
Related Issues (20)
- Bug in the resources buttons after update to v6.3.0 HOT 1
- cannot run openlens on amd64/x86_64 HOT 4
- Linux aarch64 rpm won't install HOT 13
- how to compile openlens myself HOT 1
- Tag alpha/beta/... as pre-release HOT 1
- Can we bundle QoL "out of tree" extensions? HOT 11
- Error: "getting credentials: exec: executable kubectl not found" HOT 12
- Installation loop between 6.2.5 and 6.3.0 HOT 3
- OpenLens: 6.3.0 after successful login to a cluster Blank Page HOT 4
- Will there be support for windows? HOT 1
- spawn installpath\resources\x64\lens-k8s-proxy.exe ENOENT HOT 2
- OpenLens with choco install: Error - hashes do not match HOT 1
- EKS cluster connexion : failed to initialize proxyexec plugin HOT 3
- Cluster connected but no details HOT 8
- insecure-skip-tls-verify doesnt work HOT 3
- Failed to start connection: Error: failed to retrieve port from stream HOT 4
- 6.4.0-beta 13: latest stable version? HOT 1
- Black screen after connecting to a cluster HOT 6
- Unable to view accessible namespace on cluster with limited permissions HOT 6
- Exclude alpha version from auto-updates HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openlens.