tools: add macosx-firewall script to avoid popups by danbev · Pull Request #10114 · nodejs/node · GitHub

Checklist

make -j8 test (UNIX), or vcbuild test nosign (Windows) passes
documentation is changed or added
commit message follows commit guidelines

Affected core subsystem(s)

tools

Description of change

Currently, there are a number of popups that get displayed when running
the tests asking to accept incoming network connections. Rules can be
added manually to the socket firewall on Mac OS X but getting this right
might not be obvious and quite a lot of time can be wasted trying to get
the rules right. This script hopes to simplify things a little so that
it can be re-run when needed.

The script should be runnable from both the projects root directory and
from the tools directory, for example:
$ sudo ./tools/macosx-firewall.sh

Fixes: #8911

Currently, there are a number of popups that get displayed when running the tests asking to accept incoming network connections. Rules can be added manually to the socket firewall on Mac OS X but getting this right might not be obvious and quite a lot of time can be wasted trying to get the rules right. This script hopes to simplify things a little so that it can be re-run when needed. The script should be runnable from both the projects root directory and from the tools directory, for example: $ sudo ./tools/macosx-firewall.sh Fixes: nodejs#8911

Long line.

Is the cd + pwd to ensure the directory exists?

It is really so that the path added is the full path without the .. in it. This is what is displayed when the command is run (if using .. in that path that is):

Application at path ( /Users/danielbevenius/work/nodejs/node/tools/../out/Debug/node ) added to firewall

But the entry when running /usr/libexec/ApplicationFirewall/socketfilterfw --listapps shows up without the path. Running the script again will not remove these paths, instead the new rules will just be added and the list will grow. But with the full path (without ..) it works as expected and the rules are removed and added properly.

Can you wrap the env vars in quotes? This won't work if the paths have spaces in them.

Will do, thanks

LGTM with a request.

Can you add a comment explaining the use of pwd (what you wrote in your comment earlier)?

Maybe this should specify a bit more how to run it an some implications?

@Fishrock123 I've added as suggestion, let me know what you think. Thanks

Also a short description of what the script does.

long line here... can you please wrap at 80 chars

Sorry about that, was using a MarkDown editor and did not notice.

I forgot about cctest which will also show up at times.

@Fishrock123 Do the changes look aright to you? If so would you mind approving or giving a LGTM and I'll merge this. Thanks

Currently, there are a number of popups that get displayed when running the tests asking to accept incoming network connections. Rules can be added manually to the socket firewall on Mac OS X but getting this right might not be obvious and quite a lot of time can be wasted trying to get the rules right. This script hopes to simplify things a little so that it can be re-run when needed. The script should be runnable from both the projects root directory and from the tools directory, for example: $ sudo ./tools/macosx-firewall.sh Fixes: nodejs#8911 PR-URL: nodejs#10114 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Landed in a8137dd

Currently, there are a number of popups that get displayed when running the tests asking to accept incoming network connections. Rules can be added manually to the socket firewall on Mac OS X but getting this right might not be obvious and quite a lot of time can be wasted trying to get the rules right. This script hopes to simplify things a little so that it can be re-run when needed. The script should be runnable from both the projects root directory and from the tools directory, for example: $ sudo ./tools/macosx-firewall.sh Fixes: #8911 PR-URL: #10114 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot added doc Issues and PRs related to the documentations. tools Issues and PRs related to the tools directory. labels Dec 4, 2016

mscdex changed the title tools: add macosx-firwall script to avoid popups tools: add macosx-firewall script to avoid popups Dec 4, 2016

Fishrock123 added the macos Issues and PRs related to the macOS platform / OSX. label Dec 4, 2016

bnoordhuis requested changes Dec 5, 2016

View reviewed changes

danbev added 2 commits December 5, 2016 09:48

fix long line

c39bf95

quote variables to allow for paths with spaces

d255df9

bnoordhuis approved these changes Dec 5, 2016

View reviewed changes

Fishrock123 reviewed Dec 5, 2016

View reviewed changes

danbev added 2 commits December 5, 2016 20:34

add comment explaining the usage of cd and pwd

e546655

jasnell reviewed Dec 5, 2016

View reviewed changes

fix lone line

46ad909

jasnell approved these changes Dec 6, 2016

View reviewed changes

add cctest to firewall script

cef43de

I forgot about cctest which will also show up at times.

gibfahn approved these changes Dec 9, 2016

View reviewed changes

cjihrig approved these changes Dec 9, 2016

View reviewed changes

danbev closed this Dec 9, 2016

italoacasas mentioned this pull request Dec 15, 2016

v7.3.0 proposal #10277

Merged

MylesBorins added land-on-v4.x labels Jan 16, 2017

danbev deleted the mac-os-x-firewall-script branch January 17, 2017 07:18

This was referenced Jan 24, 2017

v4.8.0 proposal #10973

Merged

v6.10.0 proposal #10974

Merged

                 * You also need to install the `Command Line Tools` via Xcode. You can find
                   this under the menu `Xcode -> Preferences -> Downloads`
                 * This step will install `gcc` and the related toolchain containing `make`
+                * You may want to setup [firewall rules](tools/macosx-firewall.sh) to avoid popups asking to accept incoming network connections when running tests.

+              TOOLSDIR="`( cd \"$TOOLSDIR\" && pwd) `"
+              ROOTDIR="`( cd \"$TOOLSDIR/..\" && pwd) `"
+              OUTDIR=$TOOLSDIR/../out
+              OUTDIR="`( cd \"$OUTDIR\" && pwd) `"

+              TOOLSDIR="`( cd \"$TOOLSDIR\" && pwd) `"
+              ROOTDIR="`( cd \"$TOOLSDIR/..\" && pwd) `"
+              OUTDIR="$TOOLSDIR/../out"
+              OUTDIR="`( cd \"$OUTDIR\" && pwd) `"

                   this under the menu `Xcode -> Preferences -> Downloads`
                 * This step will install `gcc` and the related toolchain containing `make`
+                * You may want to setup [firewall rules](tools/macosx-firewall.sh) to avoid
+                  popups asking to accept incoming network connections when running tests.

+                $SFW --unblock $NODE_DEBUG
+                $SFW --unblock $NODE_RELEASE
+                $SFW --unblock $NODE_LINK

+              ```console
+              $ sudo ./tools/macosx-firewall.sh
+              ```
+              Running this script will add rules for the executable `node` in the out directory and the symbolic `node` link in the projects root directory.

tools: add macosx-firewall script to avoid popups by danbev · Pull Request #10114 · nodejs/node · GitHub

Uh oh!

Uh oh!

tools: add macosx-firewall script to avoid popups - #10114

tools: add macosx-firewall script to avoid popups#10114danbev wants to merge 7 commits intonodejs:masternodejs/node:masterfrom danbev:mac-os-x-firewall-scriptdanbev/node:mac-os-x-firewall-scriptCopy head branch name to clipboard

Conversation

danbev commented Dec 4, 2016

Checklist

Affected core subsystem(s)

Description of change

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

bnoordhuis left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

danbev commented Dec 7, 2016

Uh oh!

danbev commented Dec 9, 2016

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

tools: add macosx-firewall script to avoid popups#10114
danbev wants to merge 7 commits into
nodejs:masterfrom
danbev:mac-os-x-firewall-script