For the TGZ package, I was signing and resigning over and over again. Break up install scripts per component, and do cleanup of cmake lists to avoid signing Radiance like 20 times total.

Author: jmarrec

.github/workflows/app_build.yml

@@ -711,12 +711,14 @@ jobs:
         os: [macos-13, macos-14]
         include:
         - os: macos-13
+          binary_os: macos-13
           SELF_HOSTED: false
           BINARY_EXT: dmg
           COMPRESSED_EXT: tar.gz
           arch: x86_64
         # This is the GHA hosted one
         - os: macos-14
+          binary_os: macos-arm64
           SELF_HOSTED: false
           BINARY_EXT: dmg
           COMPRESSED_EXT: tar.gz
@@ -730,13 +732,13 @@ jobs:
     #- name: Gather Test Package from Artifacts
     #  uses: actions/download-artifact@v4
     #  with:
-    #    name: OpenStudioApplication-${{ needs.build.outputs.OS_APP_VERSION }}.${{ github.sha }}-${{ matrix.os }}.${{ matrix.COMPRESSED_EXT }}
+    #    name: OpenStudioApplication-${{ needs.build.outputs.OS_APP_VERSION }}.${{ github.sha }}-${{ matrix.binary_os }}.${{ matrix.COMPRESSED_EXT }}
     #    path: package
 
     - name: Gather Dmg Package from Artifacts
       uses: actions/download-artifact@v4
       with:
-        name: OpenStudioApplication-${{ needs.build.outputs.OS_APP_VERSION }}.${{ github.sha }}-${{ matrix.os }}.${{ matrix.BINARY_EXT }}
+        name: OpenStudioApplication-${{ needs.build.outputs.OS_APP_VERSION }}.${{ github.sha }}-${{ matrix.binary_os }}.${{ matrix.BINARY_EXT }}
         path: dmg
 
     - name: Test Dmg Install and Package signing
@@ -761,7 +763,6 @@ jobs:
 
         begin_group "Installing"
         sudo ./temp_mount/$filename.app/Contents/MacOS/$filename --accept-licenses --default-answer --confirm-command --root $(pwd)/test_install install
-        hdiutil detach ./temp_mount/
         echo "::endgroup::"
 
         begin_group "Quick Check signature of inner executables and binaries"
@@ -787,6 +788,8 @@ jobs:
         ./test_install/EnergyPlus/energyplus -w USA_IL_Chicago-OHare.Intl.AP.725300_TMY3.epw -d out PythonPluginCustomSchedule.idf
         echo "::endgroup::"
 
+        hdiutil detach ./temp_mount/
+
     - name: Upload otool info as artifact
       uses: actions/upload-artifact@v4
       with:

CMake/install_codesign_script.cmake

@@ -21,8 +21,6 @@ Pre-conditions:
 
 This script will codesign the ``FILES_TO_SIGN``.
 
-**AN EXAMPLE** is provided to show how you could hardcode some globs, in this specific case it looks for any root dylibs by globbing for ``lib*.dylib``
-
 To do so, it uses the `CodeSigning`_ functions :cmake:command:`codesign_files_macos`
 
 This script will therefore run in the CPack staging area, and should be added after installation of root dylibs (they may come from fixup_executable)
@@ -32,9 +30,9 @@ Usage::
 
   if(APPLE AND CPACK_CODESIGNING_DEVELOPPER_ID_APPLICATION)
     set(FILES_TO_SIGN "fileA" "fileB")
+    install(CODE "set(FILES_TO_SIGN \"${FILES_TO_SIGN}\")" COMPONENT Unspecified)
     install(CODE "set(CPACK_CODESIGNING_DEVELOPPER_ID_APPLICATION \"${CPACK_CODESIGNING_DEVELOPPER_ID_APPLICATION}\")" COMPONENT Unspecified)
     install(CODE "set(CPACK_CODESIGNING_MACOS_IDENTIFIER \"${CPACK_CODESIGNING_MACOS_IDENTIFIER}\")" COMPONENT Unspecified)
-    install(CODE "set(FILES_TO_SIGN \"${FILES_TO_SIGN}\")" COMPONENT Unspecified)
     # call the script
     install(SCRIPT "${CMAKE_CURRENT_LIST_DIR}/install_codesign_script.cmake" COMPONENT Unspecified)
   endif()
@@ -102,226 +100,25 @@ if(NOT CPACK_CODESIGNING_MACOS_IDENTIFIER)
   message(FATAL_ERROR "CPACK_CODESIGNING_MACOS_IDENTIFIER is required")
 endif()
 
-
-if(CMAKE_INSTALL_COMPONENT STREQUAL "OpenStudioApp" OR NOT CMAKE_INSTALL_COMPONENT)
-  list(APPEND FILES_TO_SIGN
-    EnergyPlus/ExpandObjects
-    EnergyPlus/energyplus-24.1.0
-    EnergyPlus/energyplus.1
-    EnergyPlus/libenergyplusapi.24.1.0.dylib
-    EnergyPlus/libintl.8.dylib
-    EnergyPlus/libpython3.8.dylib
-    Ruby/openstudio.bundle
-
-    Radiance/bin/vinfo
-    Radiance/bin/pcompos
-    Radiance/bin/dgraph
-    Radiance/bin/optics2rad
-    Radiance/bin/pmapdump
-    Radiance/bin/bsdf2klems
-    Radiance/bin/gensurf
-    Radiance/bin/ra_gif
-    Radiance/bin/xglaresrc
-    Radiance/bin/histo
-    Radiance/bin/libxcb.1.dylib
-    Radiance/bin/ranimate
-    Radiance/bin/eplus_adduvf
-    Radiance/bin/glaze
-    Radiance/bin/rlam
-    Radiance/bin/neaten
-    Radiance/bin/oconv
-    Radiance/bin/normtiff
-    Radiance/bin/pfilt
-    Radiance/bin/ltpict.pl
-    Radiance/bin/rhoptimize
-    Radiance/bin/mgf2meta
-    Radiance/bin/ra_bmp
-    Radiance/bin/genworm
-    Radiance/bin/gendaylit
-    Radiance/bin/libXplugin.1.dylib
-    Radiance/bin/rhcopy
-    Radiance/bin/igraph
-    Radiance/bin/wrapBSDF
-    Radiance/bin/pvalue
-    Radiance/bin/rcollate
-    Radiance/bin/genambpos
-    Radiance/bin/rcalc
-    Radiance/bin/pinterp
-    Radiance/bin/obj2mesh
-    Radiance/bin/pdfblur
-    Radiance/bin/falsecolor
-    Radiance/bin/vwright
-    Radiance/bin/ra_rgbe
-    Radiance/bin/rfluxmtx
-    Radiance/bin/libICE.6.dylib
-    Radiance/bin/fieldcomb
-    Radiance/bin/rpiece
-    Radiance/bin/pcwarp
-    Radiance/bin/3ds2mgf
-    Radiance/bin/psign
-    Radiance/bin/libX11.6.dylib
-    Radiance/bin/bgraph
-    Radiance/bin/ev
-    Radiance/bin/genprism
-    Radiance/bin/vwrays
-    Radiance/bin/libglapi.0.dylib
-    Radiance/bin/bsdf2ttree
-    Radiance/bin/pgblur
-    Radiance/bin/mgf2inv
-    Radiance/bin/phisto
-    Radiance/bin/rhinfo
-    Radiance/bin/meta2tga
-    Radiance/bin/ra_tiff
-    Radiance/bin/trad
-    Radiance/bin/objpict
-    Radiance/bin/ies2rad
-    Radiance/bin/plotin
-    Radiance/bin/protate
-    Radiance/bin/plot4
-    Radiance/bin/replmarks
-    Radiance/bin/findglare
-    Radiance/bin/genbox
-    Radiance/bin/pextrem
-    Radiance/bin/gensky
-    Radiance/bin/xform
-    Radiance/bin/pexpand
-    Radiance/bin/genBSDF
-    Radiance/bin/rcontrib
-    Radiance/bin/ra_hexbit
-    Radiance/bin/mgf2rad
-    Radiance/bin/rad2mgf
-    Radiance/bin/libxcb-glx.0.dylib
-    Radiance/bin/rtrace
-    Radiance/bin/rhpict
-    Radiance/bin/libXfixes.3.dylib
-    Radiance/bin/getbbox
-    Radiance/bin/lampcolor
-    Radiance/bin/cnt
-    Radiance/bin/ra_xyze
-    Radiance/bin/total
-    Radiance/bin/genskyvec
-    Radiance/bin/epw2wea
-    Radiance/bin/pmdblur
-    Radiance/bin/objline
-    Radiance/bin/ximage
-    Radiance/bin/libX11-xcb.1.dylib
-    Radiance/bin/psort
-    Radiance/bin/pkgBSDF
-    Radiance/bin/pbilat
-    Radiance/bin/ttyimage
-    Radiance/bin/libXdmcp.6.dylib
-    Radiance/bin/lookamb
-    Radiance/bin/ra_ppm
-    Radiance/bin/libXau.6.dylib
-    Radiance/bin/mkpmap
-    Radiance/bin/pmblur
-    Radiance/bin/tmesh2rad
-    Radiance/bin/rlux
-    Radiance/bin/psmeta
-    Radiance/bin/libXext.6.dylib
-    Radiance/bin/objview
-    Radiance/bin/libXxf86vm.1.dylib
-    Radiance/bin/glarendx
-    Radiance/bin/ra_t8
-    Radiance/bin/libGL.1.dylib
-    Radiance/bin/libXdamage.1.dylib
-    Radiance/bin/raddepend
-    Radiance/bin/genklemsamp
-    Radiance/bin/pflip
-    Radiance/bin/icalc
-    Radiance/bin/dctimestep
-    Radiance/bin/ra_ps
-    Radiance/bin/tabfunc
-    Radiance/bin/gendaymtx
-    Radiance/bin/cv
-    Radiance/bin/rholo
-    Radiance/bin/mkillum
-    Radiance/bin/rvu
-    Radiance/bin/glrad
-    Radiance/bin/obj2rad
-    Radiance/bin/pcomb
-    Radiance/bin/rmtxop
-    Radiance/bin/genrev
-    Radiance/bin/pcond
-    Radiance/bin/libSM.6.dylib
-    Radiance/bin/evalglare
-    Radiance/bin/normpat
-    Radiance/bin/ra_t16
-    Radiance/bin/meta2bmp
-    Radiance/bin/rpict
-    Radiance/bin/libGLU.1.dylib
-    Radiance/bin/gcomp
-    Radiance/bin/rsensor
-    Radiance/bin/compamb
-    Radiance/bin/getinfo
-    Radiance/bin/macbethcal
-    Radiance/bin/xshowtrace
-    Radiance/bin/ran2tiff
-    Radiance/bin/ra_pfm
-    Radiance/bin/ranimove
-    Radiance/bin/x11meta
-    Radiance/bin/rad
-    Radiance/bin/rttree_reduce
-    Radiance/bin/x11.hdi
-    Radiance/bin/nff2rad
-    Radiance/bin/genrhgrid
-    Radiance/bin/genblinds
-    Radiance/bin/genclock
-    Radiance/bin/mksource
-    Radiance/bin/dayfact
-    Radiance/bin/mgfilt
-    Radiance/bin/xyzimage
-    Radiance/bin/ra_pict
-    Radiance/bin/glare
-    Radiance/bin/ltview.pl
-    Radiance/bin/libz.1.dylib
-    Radiance/bin/plugins/platforms/libqcocoa.dylib
-    Radiance/bin/plugins/imageformats/libqgif.dylib
-    Radiance/bin/plugins/imageformats/libqico.dylib
-    Radiance/bin/plugins/imageformats/libqjpeg.dylib
-    Radiance/bin/plugins/imageformats/libqtiff.dylib
-    Radiance/bin/QtPrintSupport.framework/Versions/5/QtPrintSupport
-    Radiance/bin/QtGui.framework/Versions/5/QtGui
-    Radiance/bin/QtCore.framework/Versions/5/QtCore
-    Radiance/bin/QtWidgets.framework/Versions/5/QtWidgets
-  )
-
-  file(GLOB_RECURSE PYTHON_SOS "${CMAKE_INSTALL_PREFIX}/EnergyPlus/python_standard_lib/**/*.so")
-  file(GLOB _numpy_dylibs "${CMAKE_INSTALL_PREFIX}/EnergyPlus/python_standard_lib/numpy/.dylibs/*.dylib")
-  list (APPEND PYTHON_SOS ${_numpy_dylibs})
-
-  print_relative_paths(PREFIX "PYTHON_SOS=" ABSOLUTE_PATHS ${PYTHON_SOS})
-endif()
-
-if(CMAKE_INSTALL_COMPONENT STREQUAL "Python" OR NOT CMAKE_INSTALL_COMPONENT)
-  file(GLOB PYTHON_OS_SOS "${CMAKE_INSTALL_PREFIX}/Python/*.so")
-  print_relative_paths(PREFIX "PYTHON_OS_SOS=" ABSOLUTE_PATHS ${PYTHON_OS_SOS})
-endif()
-
-if(CMAKE_INSTALL_COMPONENT STREQUAL "CLI" OR NOT CMAKE_INSTALL_COMPONENT)
-  list(APPEND FILES_TO_SIGN
-    lib/libopenstudiolib.dylib
-    lib/libpythonengine.so
-    lib/librubyengine.so
-    bin/install_utility
-  )
-endif()
-
 if(NOT FILES_TO_SIGN)
   message(AUTHOR_WARNING "FILES_TO_SIGN is empty")
 else()
   foreach(path ${FILES_TO_SIGN})
-    list(APPEND FULL_PATHS "${CMAKE_INSTALL_PREFIX}/${path}")
+    list(APPEND _FULL_PATHS "${CMAKE_INSTALL_PREFIX}/${path}")
   endforeach()
-  print_relative_paths(PREFIX "FULL_PATHS=" ABSOLUTE_PATHS ${FULL_PATHS})
+  print_relative_paths(PREFIX "FULL_PATHS=" ABSOLUTE_PATHS ${_FULL_PATHS})
 endif()
 
 include(${CMAKE_CURRENT_LIST_DIR}/CodeSigning.cmake)
 codesign_files_macos(
-  FILES ${FULL_PATHS} ${PYTHON_SOS} ${PYTHON_OS_SOS}
+  FILES ${_FULL_PATHS}
   SIGNING_IDENTITY ${CPACK_CODESIGNING_DEVELOPPER_ID_APPLICATION}
   PREFIX "${CPACK_CODESIGNING_MACOS_IDENTIFIER}."
   FORCE VERBOSE
 )
 
+# Clean up to avoid multiple passes (several components) appending to a pre-existing list
+unset(FILES_TO_SIGN)
+unset(_FULL_PATHS)
+
 message("Finished Codesigning inner executables and library")