[macOS] Notarization times out on macos-latest, passes on self-hosted

Hi there,

I have a GH Action configured to build and notarize an electron-based application for macOS. The build times out after 6 hours, but passes less than 30 minutes when I run the same action on a self-hosted instance.

Unfortunately, I was not able to figure out the reason for the timeout, but I have the feeling, it prompts for a password when executing codesign --sign under the hood; it should not prompt for passwords. It does not prompt when I’m running on a self-hosted, on my local mac. Of course, this is just a guess.

What would be the best way to figure out the differences between macos-latest and my self-hosted mac.

Thank you!

Hi @kittaakos,

Did you create self-hosted runner based on a clean MacOS 10.15? Some default setting on your local machine could cause the different appearance, such as env setting, any codesign identify installed already…etc.
It’s recommended to enable debug logging, check the raw logs for the error detail, compare the difference between local and hosted runner.

If possible please share your repo/sample repo for further investigation.
Thanks

Thank you for your reply, @weide-zhou.

Did you create self-hosted runner based on a clean MacOS 10.15?

No, it’s my development mac, I would not call it clean.

Some default setting on your local machine could cause the different appearance, such as env setting, any codesign identify installed already…etc.

Thanks for the pointer. I never did code signing on my mac, I am not aware of any installed codesign identities, but I agree, it must be some environmental differences. As you have advised, I enabled ACTIONS_RUNNER_DEBUG and ACTIONS_STEP_DEBUG and started two builds. One on the self-hosted, it was green, and another build on the macos-latest image. The latter has failed. I do not see any difference between the logs.

If possible please share your repo/sample repo for further investigation.

At this point, I am not allowed to share anything, unfortunately. However, we have filed an issue on GitHub Enterprise, let us try to figure out the problem there first. I am going to update this thread if either we have the solution, or I have set up an opensource repository with a dummy example.

Thank you!

I wanted to confirm, it was an issue how I signed the electron app for macOS and not in GH Actions.

This thread helped me resolving the issue.

1 Like