Skip to content

builder-upgrade: fall back to the ronin CLT dmg when softwareupdate has none - #95

Merged
rcurranmoz merged 1 commit into
mainfrom
builder-upgrade-clt-dmg
Oct 29, 2026
Merged

rcurranmoz merged 1 commit into
mainfrom
builder-upgrade-clt-dmg

Conversation

@rcurranmoz

Copy link
Copy Markdown
Collaborator

On r8-198 (macOS 15.8.1, Xcode 16.4 already installed) softwareupdate offered no Command Line Tools at all, with the install-on-demand trigger in place, so step_install_clt could never finish. Puppet's macos_xcode_tools exec does the same lookup and would fail the same way.

When softwareupdate doesn't produce usr/bin/git, install Command_Line_Tools_for_Xcode_16.4.dmg from the ronin package bucket (the file packages::xcode_cmd_line_tools uses). It's only installed if pkgutil --check-signature reports signed Apple Software; the dmg is always detached and deleted. Done this way by hand on r8-198 today, then puppet ran clean.

Tests cover the softwareupdate path, the dmg fallback, and refusing an unsigned pkg.

…as none

softwareupdate on r8-198 listed no Command Line Tools at all, only the 15.8.2
update, so the CLT step could never finish. Install the 16.4 dmg ronin ships
instead, and only if the pkg inside reports "signed Apple Software".
@rcurranmoz
rcurranmoz requested a review from a team as a code owner October 29, 2026 12:51
@rcurranmoz
rcurranmoz merged commit 56b0bcb into main Oct 29, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant