how can i notarizing dmg file

We generally recommend that you notarise and sign the outermost container that you distribute. So, if you have an app within a disk image, you should sign the app, put it in the disk image, sign the disk image, and notarise that.

Three things:

• You can sign a disk image using

  codesign

  .

• Use your Developer ID Application digital identity.

• Once you have a signed disk image, you can submit it for notarisation using

  altool

  . See Customizing the Notarization Workflow for info on how to use that tool.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

I did codesign on myapp.dmg file.

this is the result after doing it.

myapp.dmg: rejected (the code is valid but does not seem to be an app)

origin=Developer ID Application: mycompany (myteam ID)

Is rejected the right result? or is there anything else I need to check before Distribute?

--------------------------------------------------

i`m doing

codesign --force --sign "Developer ID Application mycompany (teamID)" myapp.dmg

and

xcrun altool --notarize-app -f myapp.dmg --primary-bundle-id com.mybundle.id -u myappleDeveloperId -p myapplePassword

after i get notarization success mail

xcrun stapler staple myapp.dmg

------------------------------------------------

here is another information

I tested myapp.app on another macbook

spctl -a -v myapp.app in ~/Application folder

myapp.app: a sealed resource is missing or invalid

what is the problem?

result

myapp.dmg: accepted

source = Notarized Developer ID

Thank you very much for your help.

It doesn't seem to be a signing problem with the dmg file.

But still having the same problem.

Perhaps I will review the build process as a dmg file.

Thang you