Skip to content

Comments

Update Suspicious Package to use the plist version feed instead of the webpage scraping#2034

Merged
bartreardon merged 1 commit intoInstallomator:mainfrom
gilburns:SuspiciousPackage
Feb 10, 2025
Merged

Update Suspicious Package to use the plist version feed instead of the webpage scraping#2034
bartreardon merged 1 commit intoInstallomator:mainfrom
gilburns:SuspiciousPackage

Conversation

@gilburns
Copy link
Contributor

@gilburns gilburns commented Nov 25, 2024

assemble.sh suspiciouspackage
2024-11-25 17:08:31 : REQ : suspiciouspackage : ################## Start Installomator v. 10.7beta, date 2024-11-25
2024-11-25 17:08:31 : INFO : suspiciouspackage : ################## Version: 10.7beta
2024-11-25 17:08:31 : INFO : suspiciouspackage : ################## Date: 2024-11-25
2024-11-25 17:08:31 : INFO : suspiciouspackage : ################## suspiciouspackage
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : DEBUG mode 1 enabled.
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : name=Suspicious Package
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : appName=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : type=dmg
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : archiveName=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : downloadURL=https://mothersruin.com/software/downloads/SuspiciousPackage.dmg
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : curlOptions=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : appNewVersion=4.5
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : appCustomVersion function: Not defined
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : versionKey=CFBundleShortVersionString
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : packageID=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : pkgName=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : choiceChangesXML=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : expectedTeamID=936EB786NH
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : blockingProcesses=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : installerTool=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : CLIInstaller=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : CLIArguments=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : updateTool=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : updateToolArguments=
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : updateToolRunAsCurrentUser=
2024-11-25 17:08:31 : INFO : suspiciouspackage : BLOCKING_PROCESS_ACTION=tell_user
2024-11-25 17:08:31 : INFO : suspiciouspackage : NOTIFY=success
2024-11-25 17:08:31 : INFO : suspiciouspackage : LOGGING=DEBUG
2024-11-25 17:08:31 : INFO : suspiciouspackage : LOGO=/System/Applications/App Store.app/Contents/Resources/AppIcon.icns
2024-11-25 17:08:31 : INFO : suspiciouspackage : Label type: dmg
2024-11-25 17:08:31 : INFO : suspiciouspackage : archiveName: Suspicious Package.dmg
2024-11-25 17:08:31 : INFO : suspiciouspackage : no blocking processes defined, using Suspicious Package as default
2024-11-25 17:08:31 : DEBUG : suspiciouspackage : Changing directory to /Users/gilburns/GitHub/Installomator/build
2024-11-25 17:08:31 : INFO : suspiciouspackage : App(s) found: /Applications/Suspicious Package.app
2024-11-25 17:08:31 : INFO : suspiciouspackage : found app at /Applications/Suspicious Package.app, version 4.5, on versionKey CFBundleShortVersionString
2024-11-25 17:08:31 : INFO : suspiciouspackage : appversion: 4.5
2024-11-25 17:08:31 : INFO : suspiciouspackage : Latest version of Suspicious Package is 4.5
2024-11-25 17:08:31 : WARN : suspiciouspackage : DEBUG mode 1 enabled, not exiting, but there is no new version of app.
2024-11-25 17:08:32 : REQ : suspiciouspackage : Downloading https://mothersruin.com/software/downloads/SuspiciousPackage.dmg to Suspicious Package.dmg
2024-11-25 17:08:32 : DEBUG : suspiciouspackage : No Dialog connection, just download
2024-11-25 17:08:39 : DEBUG : suspiciouspackage : File list: -rw-r--r-- 1 root staff 6.6M Nov 25 17:08 Suspicious Package.dmg
2024-11-25 17:08:39 : DEBUG : suspiciouspackage : File type: Suspicious Package.dmg: zlib compressed data
2024-11-25 17:08:39 : DEBUG : suspiciouspackage : curl output was:

  • Host mothersruin.com:443 was resolved.
  • IPv6: (none)
  • IPv4: 208.94.117.195
  • Trying 208.94.117.195:443...
  • Connected to mothersruin.com (208.94.117.195) port 443
  • ALPN: curl offers h2,http/1.1
  • (304) (OUT), TLS handshake, Client hello (1):
    } [320 bytes data]
  • CAfile: /etc/ssl/cert.pem
  • CApath: none
  • (304) (IN), TLS handshake, Server hello (2):
    { [122 bytes data]
  • (304) (IN), TLS handshake, Unknown (8):
    { [19 bytes data]
  • (304) (IN), TLS handshake, Certificate (11):
    { [2060 bytes data]
  • (304) (IN), TLS handshake, CERT verify (15):
    { [111 bytes data]
  • (304) (IN), TLS handshake, Finished (20):
    { [52 bytes data]
  • (304) (OUT), TLS handshake, Finished (20):
    } [52 bytes data]
  • SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384 / [blank] / UNDEF
  • ALPN: server accepted h2
  • Server certificate:
  • subject: CN=mothersruin.com
  • start date: Nov 3 23:45:45 2024 GMT
  • expire date: Feb 1 23:45:44 2025 GMT
  • subjectAltName: host "mothersruin.com" matched cert's "mothersruin.com"
  • issuer: C=US; O=Let's Encrypt; CN=E5
  • SSL certificate verify ok.
  • using HTTP/2
  • [HTTP/2] [1] OPENED stream for https://mothersruin.com/software/downloads/SuspiciousPackage.dmg
  • [HTTP/2] [1] [:method: GET]
  • [HTTP/2] [1] [:scheme: https]
  • [HTTP/2] [1] [:authority: mothersruin.com]
  • [HTTP/2] [1] [:path: /software/downloads/SuspiciousPackage.dmg]
  • [HTTP/2] [1] [user-agent: curl/8.7.1]
  • [HTTP/2] [1] [accept: /]

GET /software/downloads/SuspiciousPackage.dmg HTTP/2
Host: mothersruin.com
User-Agent: curl/8.7.1
Accept: /

  • Request completely sent off
    < HTTP/2 200
    < date: Mon, 25 Nov 2024 22:25:48 GMT
    < server: Apache
    < last-modified: Fri, 30 Aug 2024 15:34:35 GMT
    < etag: "69e17c-620e8540e78c0"
    < accept-ranges: bytes
    < content-length: 6939004
    < age: 2564
    < vary: Accept-Encoding
    < via: e7s
    < content-type: application/octet-stream
    <
    { [16235 bytes data]
  • Connection #0 to host mothersruin.com left intact

2024-11-25 17:08:39 : DEBUG : suspiciouspackage : DEBUG mode 1, not checking for blocking processes
2024-11-25 17:08:39 : REQ : suspiciouspackage : Installing Suspicious Package
2024-11-25 17:08:39 : INFO : suspiciouspackage : Mounting /Users/gilburns/GitHub/Installomator/build/Suspicious Package.dmg
2024-11-25 17:08:42 : DEBUG : suspiciouspackage : Debugging enabled, dmgmount output was:
Checksumming Protective Master Boot Record (MBR : 0)…
Protective Master Boot Record (MBR :: verified CRC32 $346BEA18
Checksumming GPT Header (Primary GPT Header : 1)…
GPT Header (Primary GPT Header : 1): verified CRC32 $D58AE0E9
Checksumming GPT Partition Data (Primary GPT Table : 2)…
GPT Partition Data (Primary GPT Tabl: verified CRC32 $95F8D45D
Checksumming (Apple_Free : 3)…
(Apple_Free : 3): verified CRC32 $00000000
Checksumming disk image (Apple_HFS : 4)…
disk image (Apple_HFS : 4): verified CRC32 $21F8CCB4
Checksumming (Apple_Free : 5)…
(Apple_Free : 5): verified CRC32 $00000000
Checksumming GPT Partition Data (Backup GPT Table : 6)…
GPT Partition Data (Backup GPT Table: verified CRC32 $95F8D45D
Checksumming GPT Header (Backup GPT Header : 7)…
GPT Header (Backup GPT Header : 7): verified CRC32 $58098F39
verified CRC32 $0539596D
/dev/disk2 GUID_partition_scheme
/dev/disk2s1 Apple_HFS /Volumes/Suspicious Package 4.5

2024-11-25 17:08:42 : INFO : suspiciouspackage : Mounted: /Volumes/Suspicious Package 4.5
2024-11-25 17:08:42 : INFO : suspiciouspackage : Verifying: /Volumes/Suspicious Package 4.5/Suspicious Package.app
2024-11-25 17:08:42 : DEBUG : suspiciouspackage : App size: 18M /Volumes/Suspicious Package 4.5/Suspicious Package.app
2024-11-25 17:08:43 : DEBUG : suspiciouspackage : Debugging enabled, App Verification output was:
/Volumes/Suspicious Package 4.5/Suspicious Package.app: accepted
source=Notarized Developer ID
origin=Developer ID Application: Randy Saldinger (936EB786NH)

2024-11-25 17:08:43 : INFO : suspiciouspackage : Team ID matching: 936EB786NH (expected: 936EB786NH )
2024-11-25 17:08:43 : INFO : suspiciouspackage : Downloaded version of Suspicious Package is 4.5 on versionKey CFBundleShortVersionString, same as installed.
2024-11-25 17:08:43 : DEBUG : suspiciouspackage : Unmounting /Volumes/Suspicious Package 4.5
2024-11-25 17:08:43 : DEBUG : suspiciouspackage : Debugging enabled, Unmounting output was:
"disk2" ejected.
2024-11-25 17:08:43 : DEBUG : suspiciouspackage : DEBUG mode 1, not reopening anything
2024-11-25 17:08:43 : REG : suspiciouspackage : No new version to install
2024-11-25 17:08:43 : REQ : suspiciouspackage : ################## End Installomator, exit code 0

@bartreardon bartreardon added application adds or improves an application label validated App label that has been validated by the validation bot labels Feb 7, 2025
@bartreardon
Copy link
Collaborator

bartreardon commented Feb 7, 2025

🤖 Validation robot 🤖
File fragments/labels/suspiciouspackage.sh
** Label info:
├ ✅ correct line ending
├ ✅ Name: Suspicious Package
├ ✅ Type: dmg
├ ✅ Expected Team: 936EB786NH
├ ✅ App New Version: 4.5
└ Download URL: https://mothersruin.com/software/downloads/SuspiciousPackage.dmg
├ ✅ URL is reachable
└ ✅ Download Size: 6.6 MB
✅ All checks passed

@bartreardon bartreardon added this to the v10.8 milestone Feb 7, 2025
@bartreardon
Copy link
Collaborator

bartreardon commented Feb 10, 2025

Thank you!

@bartreardon bartreardon merged commit 1710a4f into Installomator:main Feb 10, 2025
@gilburns gilburns deleted the SuspiciousPackage branch February 10, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

application adds or improves an application label validated App label that has been validated by the validation bot

Projects

None yet

Milestone

v10.8

Development

Successfully merging this pull request may close these issues.

2 participants

@gilburns @bartreardon