Creating a new dmg from notarized dmg contents needs to be notarize?

If I create a new dmg with the same contents, does the new dmg needs to be notarized?

Probably. The best way to tell is to try stapling a ticket to the new

.dmg

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Hi Quinn,

Thank you. I recreated the dmg with a notarized app, stapling the new dmg failed.

regards

PK

Probably you should not re-notarize the dmg verbatim. You should alter it in some way such that the checksums are different. For app-like bundles, this could mean re-signing it. Alternatively notarize its contents and then staple the corresponding receipts individually to ”alter” the bundle.

Apparently there’s a bug in the notarization back-end such that the upload is successful but subsequently failed which gets communicated via email — ITMS-90732 “duplicate upload”. See this thread for more details.