Skip to content

Re-seal VLC.app after bundle install so it still launches; v3.5.1 #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CryptoJones merged 1 commit into from
Jul 5, 2026
Merged

Re-seal VLC.app after bundle install so it still launches; v3.5.1 #17

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,11 @@ Module name: `dixwaveform` · target: **VLC 3.0.x**, macOS **arm64** (portable t
```sh
./install.sh
```
One-shot permanent install so **every** VLC launch finds the plugin — including Dock / Finder / Spotlight / Start-menu launches, which do *not* inherit your shell environment. On **macOS** the installer copies the plugin straight into `VLC.app`'s own plugin bundle and invalidates VLC's plugin cache (the reliable fix — an env var alone won't survive a GUI launch), and also wires `VLC_PLUGIN_PATH` (shell rc + LaunchAgent) as a fallback for terminal launches. Idempotent; safe to re-run. (To just build without touching your environment, use `./build.sh` below.)
One-shot permanent install so **every** VLC launch finds the plugin — including Dock / Finder / Spotlight / Start-menu launches, which do *not* inherit your shell environment. On **macOS** the installer copies the plugin straight into `VLC.app`'s own plugin bundle, invalidates VLC's plugin cache, and **re-seals the app's code signature** (ad-hoc, preserving VLC's entitlements) — that last step is required because adding a file to the signed bundle otherwise makes macOS refuse to launch it. It also wires `VLC_PLUGIN_PATH` (shell rc + LaunchAgent) as a fallback for terminal launches. Idempotent; safe to re-run. (To just build without touching your environment, use `./build.sh` below.)

> **Not seeing "Dix Analyzer" under Audio ▸ Visualizations after a Dock/Start-menu launch?** That's the env-var gap — re-run `./install.sh` (macOS installs into the app bundle), then **fully quit and relaunch** VLC. If VLC is installed somewhere other than `/Applications/VLC.app`, run `VLC_APP=/path/to/VLC.app ./install.sh`.
> **Not seeing "Dix Analyzer" under Audio ▸ Visualizations after a Dock/Start-menu launch?** Re-run `./install.sh` (macOS installs into the app bundle), then **fully quit and relaunch** VLC. If VLC is installed somewhere other than `/Applications/VLC.app`, run `VLC_APP=/path/to/VLC.app ./install.sh`.
>
> **VLC won't open at all after installing?** The bundle edit broke VLC's signature seal. `./install.sh` now re-seals it automatically; if you hit this on an older install, run: `xattr -cr /Applications/VLC.app && codesign -f -s - --preserve-metadata=entitlements /Applications/VLC.app`. (VLC.app becomes ad-hoc signed; a fresh VLC reinstall restores the original signature — just re-run `./install.sh` after.)

## Build (macOS, arm64)
```sh
Expand Down
14 changes: 13 additions & 1 deletion install.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,19 @@ if [ "$OS" = "Darwin" ]; then
$SUDO rm -f "$BUNDLE_PLUGINS/plugins.dat"
CACHE_GEN="$VLC_APP/Contents/MacOS/lib/vlc-cache-gen"
[ -x "$CACHE_GEN" ] && $SUDO "$CACHE_GEN" "$BUNDLE_PLUGINS" 2>/dev/null || true
echo " installed: $BUNDLE_PLUGINS/$PLUGIN_DYLIB"

# CRITICAL: adding a file to VLC.app invalidates its code-signature seal, and
# macOS then REFUSES to launch it from the Dock/Finder ("a sealed resource is
# missing or invalid" — a launch refusal, so there's no crash log). Re-seal the
# bundle ad-hoc (preserving VLC's entitlements so plugins still load) and clear
# quarantine so Gatekeeper allows the locally-modified app to open.
echo " re-sealing VLC.app signature (required after modifying the bundle)..."
$SUDO xattr -cr "$VLC_APP" 2>/dev/null || true
$SUDO codesign -f -s - --preserve-metadata=entitlements "$VLC_APP" 2>/dev/null \
|| $SUDO codesign -f -s - "$VLC_APP" 2>/dev/null || true
echo " installed + re-sealed: $BUNDLE_PLUGINS/$PLUGIN_DYLIB"
echo " (VLC.app is now ad-hoc signed; a future VLC reinstall restores the"
echo " original signature — just re-run ./install.sh afterward.)"
else
echo " WARNING: $VLC_APP not found — skipping bundle install."
echo " Set VLC_APP=/path/to/VLC.app and re-run if VLC lives elsewhere."
Expand Down
2 changes: 1 addition & 1 deletion waveform.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
#include "dix_pitch.h" /* pure pitch/chroma/key DSP (unit-tested standalone) */
#include "dix_lufs.h" /* ITU-R BS.1770 loudness (unit-tested standalone) */

#define DIX_VERSION "3.5"
#define DIX_VERSION "3.5.1"
#define DIX_W 1280
#define DIX_H 720
#define DIX_MAX_FFT 8192
Expand Down
Loading