Skip to content

stop the macOS PKG step from hanging on Intel runners - #195

Merged
peterj merged 1 commit into
mainfrom
peterj/signingfix
Oct 22, 2026
Merged

peterj merged 1 commit into
mainfrom
peterj/signingfix

Conversation

@peterj

@peterj peterj commented Oct 22, 2026

Copy link
Copy Markdown
Collaborator

Problem

In release run 39799604643, the x86_64 macOS installer job (macos-15-intel) hung after pkgbuild until it hit GitHub's 6-hour job limit. The arm64 job (macos-26) passed.

Likely cause

productbuild --sign produced no output after pkgbuild. The installer key was imported with only /usr/bin/pkgbuild on its access list, so productbuild probably triggered a keychain access prompt. A headless runner can't answer that prompt.

Changes

  • import-macos-signing.sh: also give /usr/bin/productbuild access to the Developer ID Installer key.
  • release-macos.yml: add timeout-minutes: 60 to Build PKG, so a future hang fails after an hour instead of six.

Signed-off-by: Peter Jausovec <peter.jausovec@solo.io>
@peterj
peterj requested a review from ilackarms October 22, 2026 21:43
@peterj
peterj merged commit 609c836 into main Oct 22, 2026
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants