Unverified Commit 00c13ab0 authored by Weijia Wang's avatar Weijia Wang Committed by GitHub
Browse files

Merge pull request #254330 from alexfmpe/verify-xip 

Use rcodesign verification on Xcode
parents 116994fe 3b692c3e

pkgs/os-specific/darwin/xcode/default.nix

+3 −2
Original line number Diff line number Diff line
@@ -3,7 +3,7 @@ 
let requireXcode = version: sha256:

  let

    xip = "Xcode_" + version +  ".xip";

    # TODO(alexfmpe): Find out how to validate the .xip signature in Linux



    unxip = if stdenv.buildPlatform.isDarwin

            then ''

              open -W ${xip}
@@ -14,7 +14,9 @@ let requireXcode = version: sha256: 
              rm -rf ${xip}

              pbzx -n Content | cpio -i

              rm Content Metadata

              rcodesign verify Xcode.app/Contents/MacOS/Xcode

            '';



    app = requireFile rec {

      name     = "Xcode.app";

      url      = "https://developer.apple.com/services-account/download?path=/Developer_Tools/Xcode_${version}/${xip}";
@@ -83,4 +85,3 @@ in lib.makeExtensible (self: { 
  xcode_15_1 = requireXcode "15.1" "sha256-0djqoSamU87rCpjo50Un3cFg9wKf+pSczRko6uumGM0=";

  xcode = self."xcode_${lib.replaceStrings ["."] ["_"] (if (stdenv.targetPlatform ? xcodeVer) then stdenv.targetPlatform.xcodeVer else "12.3")}";

})