Mac沙箱化Java应用实现开机自启的解决方案咨询

一、通过JNI/Java Native Access（JNA）调用SMAppService API #

SMAppService是Apple官方提供的沙箱兼容API，可直接用于配置开机自启。你可以通过JNA桥接Objective-C接口实现Java调用，步骤如下：

1. 引入JNA依赖
   在Java项目中添加JNA依赖（以Maven为例）：

   <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna</artifactId>
       <version>5.13.0</version>
   </dependency>
   <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna-platform</artifactId>
       <version>5.13.0</version>
   </dependency>
   

2. 定义SMAppService的JNA映射接口
   编写JNA接口映射SMAppService核心方法：

   import com.sun.jna.Native;
   import com.sun.jna.Pointer;
   import com.sun.jna.platform.mac.ObjCRuntime;
   import com.sun.jna.platform.mac.ObjCRuntime.Class;
   import com.sun.jna.platform.mac.ObjCRuntime.ID;
   
   public interface SMAppServiceAPI {
       SMAppServiceAPI INSTANCE = Native.load("SMAppService", SMAppServiceAPI.class);
   
       Class SMAppServiceClass = ObjCRuntime.class_getClass("SMAppService");
   
       // 获取用户登录类型的服务实例
       ID smAppServiceForUserLogin = ObjCRuntime.sel_getUid("appServiceForUserLogin");
       default ID getAppServiceForUserLogin() {
           return ObjCRuntime.msgSend(SMAppServiceClass, smAppServiceForUserLogin);
       }
   
       // 注册开机自启（带完成回调）
       ID register = ObjCRuntime.sel_getUid("registerWithCompletionHandler:");
       default void registerService(ID service, Pointer completionHandler) {
           ObjCRuntime.msgSend(service, register, completionHandler);
       }
   
       // 取消注册开机自启
       ID unregister = ObjCRuntime.sel_getUid("unregisterWithCompletionHandler:");
       default void unregisterService(ID service, Pointer completionHandler) {
           ObjCRuntime.msgSend(service, unregister, completionHandler);
       }
   
       // 检查是否已注册
       ID isRegistered = ObjCRuntime.sel_getUid("isRegistered");
       default boolean isServiceRegistered(ID service) {
           return ObjCRuntime.msgSendBoolean(service, isRegistered);
       }
   }
   

3. Java业务代码调用
   封装注册/取消注册逻辑：

   public class AutoStartManager {
       public static void enableAutoStart() {
           SMAppServiceAPI api = SMAppServiceAPI.INSTANCE;
           ID service = api.getAppServiceForUserLogin();
   
           if (!api.isServiceRegistered(service)) {
               // 注：实际需完善Block回调处理错误信息，此处简化实现
               Pointer completionHandler = new Pointer(0);
               api.registerService(service, completionHandler);
           }
       }
   
       public static void disableAutoStart() {
           SMAppServiceAPI api = SMAppServiceAPI.INSTANCE;
           ID service = api.getAppServiceForUserLogin();
   
           if (api.isServiceRegistered(service)) {
               Pointer completionHandler = new Pointer(0);
               api.unregisterService(service, completionHandler);
           }
       }
   }
   

4. 沙箱权限配置
   在应用沙箱配置中开启com.apple.security.automation.apple-events权限，同时确保应用为签名的Mac App Bundle格式，符合App Store打包要求。

二、封装轻量Objective-C辅助工具 #

若JNA调用复杂度较高，可编写小型Objective-C命令行工具处理SMAppService逻辑，再通过Java的ProcessBuilder调用：

1. 编写Objective-C工具代码

   #import <Foundation/Foundation.h>
   #import <SMAppService/SMAppService.h>
   
   int main(int argc, const char * argv[]) {
       @autoreleasepool {
           if (argc < 2) {
               NSLog(@"Usage: %s <register|unregister>", argv[0]);
               return 1;
           }
   
           NSString *command = [NSString stringWithUTF8String:argv[1]];
           SMAppService *service = [SMAppService appServiceForUserLogin];
   
           if ([command isEqualToString:@"register"]) {
               [service registerWithCompletionHandler:^(NSError * _Nullable error) {
                   exit(error ? 1 : 0);
               }];
               [[NSRunLoop currentRunLoop] runUntilDate:[NSDate dateWithTimeIntervalSinceNow:10]];
           } else if ([command isEqualToString:@"unregister"]) {
               [service unregisterWithCompletionHandler:^(NSError * _Nullable error) {
                   exit(error ? 1 : 0);
               }];
               [[NSRunLoop currentRunLoop] runUntilDate:[NSDate dateWithTimeIntervalSinceNow:10]];
           } else {
               NSLog(@"Invalid command");
               return 1;
           }
       }
       return 0;
   }
   

2. 编译并嵌入Java应用
   使用Xcode编译工具为可执行文件，嵌入到Java应用的Bundle资源目录，Java中调用示例：

   public class AutoStartHelper {
       public static void enableAutoStart() throws IOException, InterruptedException {
           ProcessBuilder pb = new ProcessBuilder(
               System.getProperty("user.dir") + "/Contents/Resources/auto-start-helper", "register"
           );
           Process process = pb.start();
           int exitCode = process.waitFor();
           if (exitCode != 0) {
               // 处理注册失败逻辑
           }
       }
   }
   

   注意：辅助工具需与主应用使用相同签名，且包含在App Bundle内，符合App Store规范。

三、关键注意事项 #

• 沙箱环境下，SMAppService会自动管理LaunchAgent文件，无需手动写入~/Library/LaunchAgents。
• 用户首次启动应用时，系统会弹出权限请求对话框，询问是否允许开机自启，此为系统强制要求，无法绕过。
• 确保应用Bundle的Info.plist中CFBundleIdentifier配置正确，SMAppService依赖该标识关联自启项。

内容的提问来源于stack exchange，提问作者Itchy