On Sun, 8 Dec 2019 at 17:35, Alan Braslau wrote:
On Sun, 8 Dec 2019 12:15:26 +0100 Otared Kavian
wrote: but otherwise as Floris suggests in his response, maybe we have to abandon MacOS in the near futureā¦
No, simply we need to adapt our procedures (installation scripts) to be compatible with MacOS policy.
One way that (still?) works is using rsync instead of fetching via http. One very simple way to quickly offer a working solution would be to offer the installer via rsync. Adapting our procedures to meet Apple's security requirements would take quite some effort (as well as paying a fee to Apple) to set up the automatism and send all binaries for notarization. See https://tug.org/TUGboat/tb40-2/tb125koch-harden.pdf for an extensive description of what approximately is needed. But note that the article's author needs to perform this roughly once per year (that's very far from actually being one-off task as there are many rounds to do), while we would need to make it work on regular basis (ideally fully automated). And MacTeX already comes as an official installer (pkg), while we don't have any app wrapper for ConTeXt yet. But in any case we need to wikify the procedure for LMTX. I thought someone described a working workaround not that long ago? (I'm not sure who, but searching for Catalina should provide some hits.) Mojca