Electron应用签名失败：com.apple扩展属性无法清除求助

问题详情 #

使用electron-builder（版本24.6.4）为Electron 27.0.4应用签名时，codesign命令报错：resource fork, Finder information, or similar detritus not allowed，根源是应用包内文件存在com.apple.FinderInfo和com.apple.fileprovider.fpfs#P扩展属性。已确认签名证书有效，但尝试xattr -cr递归删除、xattr -d手动删除均无法清除这些属性，签名流程始终失败。

完整错误日志：

> electron-builder -m

  • electron-builder  version=24.6.4 os=23.0.0
  • loaded configuration  file=package.json ("build" field)
  • loaded parent configuration  preset=react-cra
  • writing effective config  file=dist/builder-effective-config.yaml
  • packaging       platform=darwin arch=arm64 electron=27.0.4 appOutDir=dist/mac-arm64
  • signing         file=dist/mac-arm64/Ask.app identityName= *** identityHash=*** provisioningProfile=none
  ⨯ Command failed: codesign --sign *** --force --timestamp --options runtime --entitlements entitlements.plist /Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU)
/Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU): replacing existing signature
/Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU): resource fork, Finder information, or similar detritus not allowed
  failedTask=build stackTrace=Error: Command failed: codesign --sign *** --force --timestamp --options runtime --entitlements entitlements.plist /Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU)
/Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU): replacing existing signature
/Users/mateusz/Desktop/Projects/screen-question-app/frontend/dist/mac-arm64/Ask.app/Contents/Frameworks/Ask Helper (GPU).app/Contents/MacOS/Ask Helper (GPU): resource fork, Finder information, or similar detritus not allowed

执行删除命令后属性仍存在：

xattr -cr ./dist/mac-arm64/Ask.app
xattr -l ./dist/mac-arm64/Ask.app/Contents/Frameworks/Electron Framework.framework

输出依旧显示com.apple.FinderInfo和com.apple.fileprovider.fpfs#P属性。

解决办法 #

1. 移出云同步目录 #

com.apple.fileprovider.fpfs#P属性通常来自云存储服务（比如iCloud Drive、Dropbox等）的自动标记。把项目目录从云同步文件夹（如~/Documents、~/iCloud Drive）移到本地非同步目录（比如~/LocalProjects），然后重新打包签名，避免云服务自动添加属性。

2. 用find命令强制递归删除 #

单独的xattr命令可能因为文件嵌套或权限问题没生效，用find遍历所有文件逐个删除属性：

# 删除com.apple.FinderInfo
find ./dist/mac-arm64/Ask.app -type f -exec xattr -d com.apple.FinderInfo {} \;
# 删除com.apple.fileprovider.fpfs#P
find ./dist/mac-arm64/Ask.app -type f -exec xattr -d com.apple.fileprovider.fpfs#P {} \;

如果遇到权限报错，加上sudo：

sudo find ./dist/mac-arm64/Ask.app -type f -exec xattr -d com.apple.FinderInfo {} \;
sudo find ./dist/mac-arm64/Ask.app -type f -exec xattr -d com.apple.fileprovider.fpfs#P {} \;

3. 给electron-builder加自动清理钩子 #

在package.json的build字段中添加afterPack钩子，让打包完成后自动清理属性，不用手动操作：

"build": {
  "afterPack": "scripts/clean-xattr.js"
}

创建scripts/clean-xattr.js文件：

const { execSync } = require('child_process');
const path = require('path');

module.exports = async function(context) {
  const appPath = context.appOutDir;
  console.log(`清理应用包扩展属性：${appPath}`);
  // 递归删除所有扩展属性
  execSync(`xattr -cr "${appPath}"`, { stdio: 'inherit' });
  // 单独清理顽固的fpfs属性
  execSync(`find "${appPath}" -type f -exec xattr -d com.apple.fileprovider.fpfs#P {} \\;`, { stdio: 'inherit' });
};

4. 检查版本兼容性 #

当前electron-builder 24.6.4和Electron 27.0.4可能存在兼容问题，尝试升级electron-builder到最新稳定版，或者降级Electron到官方推荐的匹配版本。

验证属性是否清除 #

执行完清理命令后，用以下命令检查属性是否已删除：

xattr -lr ./dist/mac-arm64/Ask.app | grep -E "(com.apple.FinderInfo|com.apple.fileprovider.fpfs#P)"

如果没有输出，说明属性已清除，此时重新运行electron-builder -m即可完成签名。

内容的提问来源于stack exchange，提问作者Mateusz Romaniuk