Can't update app while VPN is connected (Packet Tunnel Provider)

I've update my custom VPN app at the App Store to a newer version (Network Extension, Packet Tunnel Provider, macOS).

It seems that the existing apps on the users' Macs can't be updated when they are connected to the VPN.
Automatic update failed, and they also tried to go directly to the store, and manually download the new version.
It seems that they are able to download the new version, but the installation fails.
They are able to update to the new version only after they're disconnecting the VPN.

This is probably a relevant log from their Console:
Code Block
pkd: [com.apple.PlugInKit:holds] hold refused. Busy plugins: <private>
appstoreagent: (PlugInKit) [com.apple.PlugInKit:holds] <PKManager:0x7fea5e544f50> hold request for [<private>] with flags: 0x2 completed with error: Error Domain=PlugInKit Code=14 UserInfo={busyPlugInUUIDs=<private>, NS LocalizedDescription=<private>}


I know that there are some reports here about this problem:
https://developer.apple.com/forums/thread/128894?answerId=652178022#652178022
And even on StackOverflow.
But I don't know about the status of this bug - are you familiar with it?

I also opened FB8938775

Answered by Systems Engineer in 652592022

P.S - since fixing this issue/ finding a workaround is important to us, will it help to speed things up if I'll request a DTS?

Unfortunately, the only workaround I will be able to develop for you is one that you are aware of already; "They are able to update to the new version only after they're disconnecting the VPN," so in this case it would be best to just keep your bug report updated with the latest information.


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
Thanks for reporting. I have seen other related bugs similar to this in the past, so it's good to get this bug report recorded. I've copied myself on it for further updates.


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
Thanks Matt!
I've added logs to this bug report.

P.S - since fixing this issue/ finding a workaround is important to us, will it help to speed things up if I'll request a DTS?
Accepted Answer

P.S - since fixing this issue/ finding a workaround is important to us, will it help to speed things up if I'll request a DTS?

Unfortunately, the only workaround I will be able to develop for you is one that you are aware of already; "They are able to update to the new version only after they're disconnecting the VPN," so in this case it would be best to just keep your bug report updated with the latest information.


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
Can't update app while VPN is connected (Packet Tunnel Provider)
 
 
Q