Help with: Autoupdate - Service could not initialize - failed with errno 13 - Permission denied

[BobBrownConsulting]

I'm working to integrate Sparkle into a QT based application.

The signed version (debug or release) fails to install properly. A unsigned version works properly (running an unsigned version that pulls down a signed version).

I expect there is something going on with the signing of the Sparkle.framework that is included in the application bundle.

Any insight is very much appreciated.

Here's the relevant portion from the logs:

2024-09-23 21:25:31.467724 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : xpcproxy spawned with pid 82354
2024-09-23 21:25:31.467731 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : internal event: SPAWNED, code = 0
2024-09-23 21:25:31.467732 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : service state: xpcproxy
2024-09-23 21:25:31.467739 (gui/501/com.avid.transport.client) : cannot spawn: service is in penalty box
2024-09-23 21:25:31.467752 (gui/501/net.pulsesecure.pulsetray) : cannot spawn: service is in penalty box
2024-09-23 21:25:31.467759 (gui/501/com.avid.CloudClientServices) : cannot spawn: service is in penalty box
2024-09-23 21:25:31.467775 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : internal event: SOURCE_ATTACH, code = 0

2024-09-23 21:25:31.473062 (gui/501/remotoplayback.remoto.com-sparkle-updater [82353]) : Could not find and/or execute program specified by service: 13: Permission denied: /Applications/RemotoPlayback-1.0.0.9.app/Contents/Frameworks/Sparkle.framework/Versions/B/Autoupdate

2024-09-23 21:25:31.473078 (gui/501/remotoplayback.remoto.com-sparkle-updater [82353]) : Service could not initialize: access(/Applications/RemotoPlayback-1.0.0.9.app/Contents/Frameworks/Sparkle.framework/Versions/B/Autoupdate, X_OK) failed with errno 13 - Permission denied, error 0x6f - Invalid or missing Program/ProgramArguments
2024-09-23 21:25:31.473082 (gui/501/remotoplayback.remoto.com-sparkle-updater [82353]) : initialization failure: 23D56: xpcproxy + 35648 [1091][60813358-1536-3DDB-A68B-1C96DABC6012]: 0x6f
2024-09-23 21:25:31.473083 (gui/501/remotoplayback.remoto.com-sparkle-updater [82353]) : Service setup event to handle failure and will not launch until it fires.
2024-09-23 21:25:31.473086 (gui/501/remotoplayback.remoto.com-sparkle-updater [82353]) : internal event: INIT, code = 111
2024-09-23 21:25:31.473135 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : Could not find and/or execute program specified by service: 13: Permission denied: /Users/bbrown/Library/Caches/remotoplayback.remoto.com/org.sparkle-project.Sparkle/Launcher/WEkO4AdI3/Updater.app/Contents/MacOS/Updater
2024-09-23 21:25:31.473140 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : Service could not initialize: access(/Users/bbrown/Library/Caches/remotoplayback.remoto.com/org.sparkle-project.Sparkle/Launcher/WEkO4AdI3/Updater.app/Contents/MacOS/Updater, X_OK) failed with errno 13 - Permission denied, error 0x6f - Invalid or missing Program/ProgramArguments
2024-09-23 21:25:31.473143 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : initialization failure: 23D56: xpcproxy + 35648 [1091][60813358-1536-3DDB-A68B-1C96DABC6012]: 0x6f
2024-09-23 21:25:31.473146 (gui/501/remotoplayback.remoto.com-sparkle-progress [82354]) : Service setup event to handle failure and will not launch until it fires.

[zorgiepoo]

Check you’re copying Sparkle framework and its embedded helper apps correctly. See #2258 for example which wrongly copied the framework resulting in missing executable permission bits and symlinks etc.

Otherwise you can upload a copy of the app and/or copied framework which I can check.

[BobBrownConsulting]

@zorgiepoo Thanks so much for your help on this.

I do believe there is something odd/wrong with signing. Alternatively, a different version of the framework might be getting found/used (potential rpath issues?)

I've zipped and attached the Sparkle.framework embedded into my applications Frameworks folder.

Here is my signing command:

codesign --entitlements app.entitlements --force --timestamp --verbose -s "Developer ID Application: XXX XXX (XXXXXX)" build_arm64_release/install/dmg/RemotoPlayback.app/Contents/Frameworks/Sparkle.framework

Here are the results:

build_arm64_release/install/dmg/RemotoPlayback.app/Contents/Frameworks/Sparkle.framework: replacing existing signature
build_arm64_release/install/dmg/RemotoPlayback.app/Contents/Frameworks/Sparkle.framework: signed bundle with Mach-O universal (x86_64 arm64) [org.sparkle-project.Sparkle]

When I run:

codesign --verify --deep --verbose /Applications/RemotoPlayback-1.0.0.9.app/Contents/Frameworks/Sparkle.framework

/Applications/RemotoPlayback-1.0.0.9.app/Contents/Frameworks/Sparkle.framework: valid on disk
/Applications/RemotoPlayback-1.0.0.9.app/Contents/Frameworks/Sparkle.framework: satisfies its Designated Requirement

Sparkle.framework.zip

[BobBrownConsulting]

@zorgiepoo Thanks for your help and pointing me in the proper direction.

My issue was with permissions. The cmake portion of the build scripts were not copying over permissions properly. Once this was resolved the issue went away.