codesign_adhoc does not work with python 3.13 #546
Description
Log attached for an example of the relevant traceback
$ python py2app_setup.py py2app
running py2app
/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/build_app.py:966: _DeprecatedInstaller: setuptools.installer and fetch_build_eggs are deprecated.
!!
********************************************************************************
Requirements should be satisfied by a PEP 517 installer.
If you are using pip, you can try `pip install --use-pep517`.
********************************************************************************
!!
self.distribution.fetch_build_eggs(self.distribution.install_requires)
running build_py
...
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_sha2.so: signed Mach-O universal (x86_64 arm64) [_sha2.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_pickle.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_pickle.so: signed Mach-O universal (x86_64 arm64) [_pickle.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_posixsubprocess.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_posixsubprocess.so: signed Mach-O universal (x86_64 arm64) [_posixsubprocess.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_lsprof.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_lsprof.so: signed Mach-O universal (x86_64 arm64) [_lsprof.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_asyncio.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_asyncio.so: signed Mach-O universal (x86_64 arm64) [_asyncio.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_multibytecodec.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_multibytecodec.so: signed Mach-O universal (x86_64 arm64) [_multibytecodec.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_decimal.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_decimal.so: signed Mach-O universal (x86_64 arm64) [_decimal.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_zoneinfo.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_zoneinfo.so: signed Mach-O universal (x86_64 arm64) [_zoneinfo.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/resource.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/resource.so: signed Mach-O universal (x86_64 arm64) [resource.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_csv.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_csv.so: signed Mach-O universal (x86_64 arm64) [_csv.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_testinternalcapi.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_testinternalcapi.so: signed Mach-O universal (x86_64 arm64) [_testinternalcapi.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_sha3.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_sha3.so: signed Mach-O universal (x86_64 arm64) [_sha3.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_contextvars.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_contextvars.so: signed Mach-O universal (x86_64 arm64) [_contextvars.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_queue.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/_queue.so: signed Mach-O universal (x86_64 arm64) [_queue.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/cryptography/hazmat/bindings/_rust.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/cryptography/hazmat/bindings/_rust.so: signed Mach-O universal (x86_64 arm64) [_rust-555549441b0e088d919b3a77824f365bd8bbd016]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/bcrypt/_bcrypt.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/bcrypt/_bcrypt.so: signed Mach-O universal (x86_64 arm64) [_bcrypt-55554944cfb10138821534919d0d02b545ab0518]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/Foundation/_inlines.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/Foundation/_inlines.so: signed Mach-O universal (x86_64 arm64) [_inlines-5555494443b501ca48ff32b3b699b39c91a838ca]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/Foundation/_Foundation.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/Foundation/_Foundation.so: signed Mach-O universal (x86_64 arm64) [_Foundation-55554944d977e69fd4053d89ac2e44c829e4f61d]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/AppKit/_inlines.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/AppKit/_inlines.so: signed Mach-O universal (x86_64 arm64) [_inlines-55554944a6c6ee967de8303a9a9f46651cfc9365]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/AppKit/_AppKit.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/AppKit/_AppKit.so: signed Mach-O universal (x86_64 arm64) [_AppKit-555549440b5a2d4767fe389da58d4081aeabb36e]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CFNetwork/_manual.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CFNetwork/_manual.so: signed Mach-O universal (x86_64 arm64) [_manual-55554944bd85ad5b6aaf3c42bea0bf972236089a]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/objc/_machsignals.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/objc/_machsignals.so: signed Mach-O universal (x86_64 arm64) [_machsignals-5555494489574fb1d87a3163b6ec8b7fbcde890b]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/objc/_objc.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/objc/_objc.so: signed Mach-O universal (x86_64 arm64) [_objc-55554944d67faffcf1893f1da46163f2b99e5f86]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/UserNotifications/_UserNotifications.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/UserNotifications/_UserNotifications.so: signed Mach-O universal (x86_64 arm64) [_UserNotifications-55554944b0dc413234b531259a2b956202e35ed9]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CoreFoundation/_inlines.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CoreFoundation/_inlines.so: signed Mach-O universal (x86_64 arm64) [_inlines-555549445960798ead69310c9df7754090a2fc58]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CoreFoundation/_CoreFoundation.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/CoreFoundation/_CoreFoundation.so: signed Mach-O universal (x86_64 arm64) [_CoreFoundation-555549445dd09b5842b539da806d9734f43da398]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/zope/interface/_zope_interface_coptimizations.so: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Resources/lib/python3.13/lib-dynload/zope/interface/_zope_interface_coptimizations.so: signed Mach-O universal (x86_64 arm64) [_zope_interface_coptimizations.cpython-313-darwin]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/libssl.3.dylib: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/libssl.3.dylib: signed Mach-O universal (x86_64 arm64) [libssl.3]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/libcrypto.3.dylib: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/libcrypto.3.dylib: signed Mach-O universal (x86_64 arm64) [libcrypto.3]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tk.framework/Versions/8.6/Tk: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tk.framework/Versions/8.6/Tk: code object is not signed at all
In subcomponent: /Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tk.framework/Versions/8.6/tkConfig.sh
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Python.framework/Versions/3.13/Python: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Python.framework/Versions/3.13/Python: signed bundle with Mach-O universal (x86_64 arm64) [org.python.python]
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/Tcl: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/Tcl: code object is not signed at all
In subcomponent: /Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/tclConfig.sh
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/Tcl: replacing existing signature
/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/Tcl: code object is not signed at all
In subcomponent: /Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app/Contents/Frameworks/Tcl.framework/Versions/8.6/tclConfig.sh
Traceback (most recent call last):
File "/Users/glyph/Projects/Pomodouroboros/py2app_setup.py", line 47, in <module>
setup(
~~~~~^
data_files=DATA_FILES,
^^^^^^^^^^^^^^^^^^^^^^
options={"py2app": OPTIONS},
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/__init__.py", line 103, in setup
return distutils.core.setup(**attrs)
~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/_distutils/core.py", line 184, in setup
return run_commands(dist)
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/_distutils/core.py", line 200, in run_commands
dist.run_commands()
~~~~~~~~~~~~~~~~~^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/_distutils/dist.py", line 970, in run_commands
self.run_command(cmd)
~~~~~~~~~~~~~~~~^^^^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/dist.py", line 974, in run_command
super().run_command(command)
~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/setuptools/_distutils/dist.py", line 989, in run_command
cmd_obj.run()
~~~~~~~~~~~^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/build_app.py", line 987, in run
self._run()
~~~~~~~~~^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/build_app.py", line 1217, in _run
self.run_normal()
~~~~~~~~~~~~~~~^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/build_app.py", line 1330, in run_normal
self.create_binaries(py_files, pkgdirs, extensions, loader_files)
~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/build_app.py", line 1791, in create_binaries
codesign_adhoc(target.appdir)
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^
File "/Users/glyph/.virtualenvs/Pomodouroboros/lib/python3.13/site-packages/py2app/util.py", line 870, in codesign_adhoc
raise RuntimeError("Cannot sign bundle %r" % (bundle,))
RuntimeError: Cannot sign bundle '/Users/glyph/Projects/Pomodouroboros/dist/Pomodouroboros.app'