feat(bundler): add macos pkg installer support with custom signing #14611
+470
−13
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Implements support for creating macOS PKG installers using pkgbuild and productbuild. Creates component packages from .app bundles and combines them into distribution packages using a user-provided distribution.xml file from the project root. Changes: - Add PackageType::Pkg enum variant and register it for macOS - Create bundle/macos/pkg module implementing two-level PKG structure - Wire PKG bundler into main bundle dispatcher - Require distribution.xml in project root for PKG customization
Implements PKG installer signing using productsign. Signs the final distribution package with the identity specified in macos.signingIdentity configuration or APPLE_CERTIFICATE environment variable. Changes: - Add sign_pkg() function to macos/sign.rs using productsign - Call sign_pkg() after productbuild in PKG bundler - Respects --no-sign flag and signing identity configuration
Adds support for custom signing commands to allow users to integrate external signing tools (like HSM-based solutions) for .app bundles, .pkg installers, and .dmg disk images. Custom commands are checked before native signing, allowing users to completely override the signing process. The %1 placeholder is replaced with the path to the file being signed. Configuration fields added to MacOsSettings: - app_sign_command: Custom command for signing .app bundles - pkg_sign_command: Custom command for signing .pkg installers - dmg_sign_command: Custom command for signing .dmg disk images Changes: - Add custom sign command fields to MacOsSettings - Implement sign_app_custom, sign_pkg_custom, sign_dmg_custom functions - Update app.rs, pkg/mod.rs, and dmg/mod.rs to check for custom commands - Reuse Windows-style %1 placeholder substitution pattern
Enables developers to specify custom signing commands for .app bundles,
.pkg installers, and .dmg disk images on macOS. This is useful for
organizations that need to use proprietary signing infrastructure
instead of the native codesign/productsign tools.
Configuration example in tauri.conf.json:
```
{
"bundle": {
"macOS": {
"appSignCommand": {
"cmd": "./shims/sign_app.sh",
"args": ["%1"]
},
"pkgSignCommand": {
"cmd": "./shims/sign_pkg.sh",
"args": ["%1"]
}
}
}
}
```
The %1 placeholder in args is replaced with the path to the artifact
being signed.
Run custom commands in the same directory as the tauri build command was run, allowing developers to use relative paths as expected.
pierrekin
changed the title
pierrekin
force-pushed
the
ph-macos-pkg
branch
from
a88bc07 to
6066199
Compare
FabianLars
reviewed
Dec 6, 2025
Member
FabianLars
left a comment
FabianLars
left a comment
There was a problem hiding this comment.
Adds support for custom signing commands to integrate external signing tools (e.g., HSM-based solutions):
Are there HSM based solutions for macOS? i know of tools like https://github.com/indygreg/apple-platform-rs (which i'd love to integrate into tauri at some point) but didn't hear about hsm ones yet (or many local solutions either).
For the signCommand config, if we keep it, i think it would make more sense to match the Windows behavior and have a single config and leave it to the scripts to handle the file type check if needed.
Also, for the future it would make reviews much easier to have the pkg impl and the custom signing feature in 2 separate PRs :)
Lastly, we also need to check how to make the updater work with this, eg do we still use the .app bundle to update?
| } | ||
|
|
||
| package_types.sort_by_key(|a| a.priority()); | ||
| log::info!("Sorted package types: {:?}", package_types); |
Member
There was a problem hiding this comment.
i won't annotate every line but logs like this one are honestly a bit too verbose, at least for the info level, perhaps tracing or debug.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Adds support for creating macOS PKG installers with both native and custom signing capabilities. This enables distribution
of Tauri applications via PKG installers and supports HSM-based signing workflows.
Features
PKG Installer Support
pkgbuildandproductbuilddistribution.xmlin project root for PKG customizationproductsignusingsigningIdentityorAPPLE_CERTIFICATEenvironment variable--no-signflagCustom Signing Commands
Adds support for custom signing commands to integrate external signing tools (e.g., HSM-based solutions):
appSignCommand: Custom command for signing .app bundlespkgSignCommand: Custom command for signing .pkg installersdmgSignCommand: Custom command for signing .dmg disk imagesCustom commands are checked before native signing and use
%1placeholder for the artifact path. Commands run in thedirectory where
tauri buildwas executed, allowing relative paths.Configuration Example
{ "bundle": { "macOS": { "appSignCommand": { "cmd": "./shims/sign_app.sh", "args": ["%1"] }, "pkgSignCommand": { "cmd": "./shims/sign_pkg.sh", "args": ["%1"] }, "dmgSignCommand": { "cmd": "./shims/sign_dmg.sh", "args": ["%1"] } } } }Test Plan
Modified Crates