-
Notifications
You must be signed in to change notification settings - Fork 329
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Only run check SIP enablement once in init
step
#2441
Conversation
src/util.ts
Outdated
logger: Logger, | ||
): Promise<boolean | undefined> { | ||
if (process.env[EnvVar.IS_SIP_ENABLED] !== undefined) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We may also want to check that it's not the empty string (or defensively that it's either "true" or "false")
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I can check if it's "true" or "false" 👍 good suggestion!
Co-authored-by: Henry Mercer <[email protected]>
Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks. |
* Update changelog and version after v3.26.4 * Update checked-in dependencies * Only run check SIP enablement once in `init` step (#2441) Co-authored-by: Henry Mercer <[email protected]> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Update changelog for v3.26.5 --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Angela P Wen <[email protected]> Co-authored-by: Henry Mercer <[email protected]>
In #2434 we stopped calling the
df
system binary on MacOS ARM runners where SIP was disabled, but the actual call tocsrutil
itself was run again and is also a binary 😸This change makes it so that
csrutil
is only called once, in theinit
step before the build tracer environment variables are set, and then its result is saved in an environment variable.Merge / deployment checklist