Comments for Erick Dransch http://www.erickdransch.com/blog Sat, 01 Dec 2012 21:38:28 +0000 hourly 1 Comment on Numbers by edransch http://www.erickdransch.com/blog/2012/12/numbers/#comment-67 edransch Sat, 01 Dec 2012 21:38:28 +0000 http://www.erickdransch.com/blog/?p=229#comment-67 This is a very interesting idea. So in keeping with this analogy, we should employ good city planning practices! Are there other parallels that can be drawn between community building in open source and community building in a city? This is a very interesting idea. So in keeping with this analogy, we should employ good city planning practices!
Are there other parallels that can be drawn between community building in open source and community building in a city?

]]> Comment on Numbers by DB http://www.erickdransch.com/blog/2012/12/numbers/#comment-66 DB Sat, 01 Dec 2012 21:00:38 +0000 http://www.erickdransch.com/blog/?p=229#comment-66 In a community data mining is not usually necessary because it is small enough for everyone to know all the active participants fairly well (i.e. abstract data mining is often not worth the return on investment). Maybe it would be more accurate to think of Mozilla as a city, and Josh Matthews is doing demographic analysis on the city as a whole (because it is impossible for any one person to know enough about everybody involved). Calling Mozilla a city does not mean that there aren't communities that form within the city. The communities might be based on location (e.g. mozillans in a particular region) or interest (working on particular code or features, etc.). In a community data mining is not usually necessary because it is small enough for everyone to know all the active participants fairly well (i.e. abstract data mining is often not worth the return on investment). Maybe it would be more accurate to think of Mozilla as a city, and Josh Matthews is doing demographic analysis on the city as a whole (because it is impossible for any one person to know enough about everybody involved).

Calling Mozilla a city does not mean that there aren’t communities that form within the city. The communities might be based on location (e.g. mozillans in a particular region) or interest (working on particular code or features, etc.).

]]> Comment on Signing Mac Builds by Jim http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-61 Jim Mon, 18 Jun 2012 18:46:22 +0000 http://www.erickdransch.com/blog/?p=32#comment-61 Tangentially related question for you... do you start your build servers from Terminal.app, ie attached to a GUI process? I've been having to do this for my own release engineering needs, and I'd really prefer not to have to do this, to just be able to do it from SSH. As you likely know though, running a tool like codesign or hdiutil from an unattached (to the GUI) ssh process does not work so well. Tangentially related question for you… do you start your build servers from Terminal.app, ie attached to a GUI process? I’ve been having to do this for my own release engineering needs, and I’d really prefer not to have to do this, to just be able to do it from SSH. As you likely know though, running a tool like codesign or hdiutil from an unattached (to the GUI) ssh process does not work so well.

]]> Comment on Signing Mac Builds by Nomis101 http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-60 Nomis101 Sat, 02 Jun 2012 08:32:33 +0000 http://www.erickdransch.com/blog/?p=32#comment-60 How does this signing process work if you want to pack the application than into a DMG? E.g. if I build my own unofficial version of Thunderbird or Firefox, sign it with my own Developer ID and than pack it into the DMG, than the signature is broken "invalid signature (code or signature have been modified)". How do I pack the App with a valid signature into the DMG? I need to sign my unofficial versions of Firefox/Thunderbird, otherwise it will not work (in default settings) on 10.8. For details what I've tried, see: http://groups.google.com/group/mozilla.dev.apps.thunderbird/browse_thread/thread/7578d96ba4fd294b# Thanks! How does this signing process work if you want to pack the application than into a DMG? E.g. if I build my own unofficial version of Thunderbird or Firefox, sign it with my own Developer ID and than pack it into the DMG, than the signature is broken “invalid signature (code or signature have been modified)”. How do I pack the App with a valid signature into the DMG? I need to sign my unofficial versions of Firefox/Thunderbird, otherwise it will not work (in default settings) on 10.8.
For details what I’ve tried, see: http://groups.google.com/group/mozilla.dev.apps.thunderbird/browse_thread/thread/7578d96ba4fd294b#
Thanks!

]]> Comment on Signing Mac Builds by Carl http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-51 Carl Fri, 25 May 2012 04:30:10 +0000 http://www.erickdransch.com/blog/?p=32#comment-51 That makes sense :) That makes sense :)

]]> Comment on Signing Mac Builds by edransch http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-50 edransch Thu, 24 May 2012 23:40:35 +0000 http://www.erickdransch.com/blog/?p=32#comment-50 The reason we avoided using this solution is because we want to be absolutely sure that the password doesn't show up in any command history. If we input the password via tty, it's stored in memory and won't risk being stored permanently. The reason we avoided using this solution is because we want to be absolutely sure that the password doesn’t show up in any command history.
If we input the password via tty, it’s stored in memory and won’t risk being stored permanently.

]]> Comment on Signing Mac Builds by Carl http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-49 Carl Thu, 24 May 2012 23:30:44 +0000 http://www.erickdransch.com/blog/?p=32#comment-49 You could also use security unlock-keychain -p $PASSWORD $KEYCHAIN_NAME You could also use security unlock-keychain -p $PASSWORD $KEYCHAIN_NAME

]]> Comment on Signing Mac Builds by edransch http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-42 edransch Fri, 18 May 2012 13:05:16 +0000 http://www.erickdransch.com/blog/?p=32#comment-42 You'll likely need an Apple Developer ID, see <a href="http://blog.mozilla.org/bhearsum/archives/287" rel="nofollow">Ben's blog post</a>. After that, if you're signing by hand the process is fairly simple. You can either sign using Xcode or the <a href="https://developer.apple.com/library/mac/#documentation/Darwin/Reference/Manpages/man1/codesign.1.html" rel="nofollow">codesign</a> command. The reason we ran have a more complex solution is because we're signing builds automatically and we need to avoid any required user input. The default CodeResources rules work well for many applications, so you may not have to worry about creating a CodeResources file. You’ll likely need an Apple Developer ID, see Ben’s blog post.
After that, if you’re signing by hand the process is fairly simple. You can either sign using Xcode or the codesign command.

The reason we ran have a more complex solution is because we’re signing builds automatically and we need to avoid any required user input.

The default CodeResources rules work well for many applications, so you may not have to worry about creating a CodeResources file.

]]> Comment on Signing Mac Builds by Ben Hearsum http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-41 Ben Hearsum Fri, 18 May 2012 12:50:30 +0000 http://www.erickdransch.com/blog/?p=32#comment-41 Thank you so much for the detailed CodeResources overview, Perry - I wish you had been around a few months ago ;). Firefox is built a fair bit differently than other OS X apps, so some of what you mention is not relevant to us. Eg, we ship completely separate binaries for different locales - there's no .lproj files in our packages at all. We actually do want our Beta releases to get in the hands of as many people as possible, so we'll likely continue using a Developer ID for those. You're making me rethink whether or not we want to use a Developer ID certificate for Nightlies and Aurora, though... Thank you so much for the detailed CodeResources overview, Perry – I wish you had been around a few months ago ;) . Firefox is built a fair bit differently than other OS X apps, so some of what you mention is not relevant to us. Eg, we ship completely separate binaries for different locales – there’s no .lproj files in our packages at all. We actually do want our Beta releases to get in the hands of as many people as possible, so we’ll likely continue using a Developer ID for those. You’re making me rethink whether or not we want to use a Developer ID certificate for Nightlies and Aurora, though…

]]> Comment on Signing Mac Builds by Daniel Glazman http://www.erickdransch.com/blog/2012/02/signing-mac-builds/#comment-39 Daniel Glazman Fri, 18 May 2012 09:17:37 +0000 http://www.erickdransch.com/blog/?p=32#comment-39 Wow, thanks for that article. That is going to impact all xulrunner-based apps too, including my BlueGriffon. Do you think the process outlined above is different for them? Wow, thanks for that article. That is going to impact all xulrunner-based apps too, including my BlueGriffon. Do you think the process outlined above is different for them?

]]>