Homebrew’s package index. For bundler I did the following on Catalina $ brew install v8@3.15 $ bundle config build.libv8 -with-system-v8 $ bundle config build.therubyracer -with-v8-dir=$(brew -prefix v8@3.15) $ bundle install this worked ty.
The default bash on macOS is still bash v3:
Just recently, bash v5 was released. The discrepancy comes from the fact that bash has been licensed as GPL v3 since version 4. Apple does not include GPL v3 licensed tools with macOS.
However, nothing is keeping you from downloading and installing the latest bash version.
New features include, among many other things, associated arrays (i.e. dictionaries) and better auto-completion setup.
While you would think this is a common desire, most pages I have found will simply point to Homebrew to download and install a newer bash version.
The main challenge with using brew is that it does not work on the scale that MacAdmins require. brew is designed for single user installation, where the user has administrator privileges. brew’s workflows do not scale to large deployments controlled with a management system.
Ideally, there would be package installer for the latest bash version. Unfortunately, the bash project does not provide one.
In this post, I will show how you can install the latest bash version without brew and how to build an installer package for deployment.
Manual Installation
This requires Xcode or the Developer Command Line Tools to be installed.
First, download the source for the latest bash version from this page. As of this writing the latest version is bash-5.0 and the file you want is bash-5.0.tar.gz. Once downloaded, you can expand the archive in Finder by double-clicking.
Update: I have a post with some updated instructions to include the patches to bash 5.0.
Open a Terminal window and change directory to the newly expanded bash-5.0 directory. Then run the configure script there.
The configure process will take a while, there will be plenty of messages showing progress.
Once the configure process is complete. You can build bash with the make command.
This will build the bash binary and the supporting files in the current directory. That’s not where we want it in the end, but it is probably a good idea see if the build process works. This will (again) take a while. There will be some odd looking warnings, but you can ignore those.
When make succeeds, you can actually install bash v5 with
This will build and install the bash binary and supporting files in /usr/local/bin and /usr/local. sudo is required to modify /usr/local.
If you were just looking for a way to install bash v5 without brew, you are done!
There is more useful information in the rest of the post, though, so keep reading!
How the new and the old bash interact
By default, the bash v5 binary is called bash and will be installed in /usr/local/bin. The macOS default PATH lists /usr/local/bin before /bin where the default bash v3 binary, also called bash, is located.
This means, that when a user types bash in to a shell, the version in /usr/local/bin will be preferred over the pre-installed bash v3.
You can test this behavior in Terminal. Since the default shell has not yet been changed from /bin/bash the Terminal still opens to bash v3. You can test this by showing the BASH_VERSION environment variable:
But when you then run bash it will invoke /usr/local/bin/bash, so it will run the new bash v5. It will show this in the prompt, but you can also verify the BASH_VERSION.
This might be the setup you want, when you want to use bash v5 always. It might lead to some unexpected behavior for some users, though.
One option to avoid this ambiguity is to rename the binary in /usr/local/bin to bash5. But then other tools such as env (mentioned below) will not find the binary any more.
- Scripting OS X: Where PATHs come from
Note: the PATH in other contexts will likely not contain /usr/local/bin and further confuse matters.
bash v5 and Scripting
Scripts using bash, should have the full path to the binary in the shebang. This way, the script author can control whether a script is executed by the default bash v3 (/bin/bash) or the newer bash v5 (/usr/local/bin/bash or /usr/local/bin/bash5).
It is often recommended to use the env command in the shebang:
The env command will determine the path to the bash binary in the current environment. (i.e. using the current PATH) This is useful when the script has to run in various environments where the location of the bash binary is unknown, in other words across multiple Unix and Unix-like platforms. However, this renders the actual version of bash that will interpret the script unpredictable.
For example, assume you have bash v5 installed in the default configuration (as /usr/local/bin/bash. A script with the shebang #!/usr/bin/env bash launched in the user environment (i.e. from Terminal) will use the newer bash, as /usr/local/bin comes before /bin in the search order.
When you launch the same script in a different context, e.g. as an installation script, an AppleScript, or a management system, /usr/local/bin will likely not be part of the PATH in that environment. Then the env shebang will choose /bin/bash (v3). The script will be interpreted and might behave differently.
Administrators prefer certainty in their managed environments. Administrators should know the location and versions of the binaries on their systems. For management scripts, you should avoid env and use the proper full path to the desired interpreter binary.
The solutions to resolve the ambiguity are
- use the full path to the binary in the shebang
- manage and update the additional custom version of
bashwith a management system - (optional) rename the newer
bashbinary tobash5orbash4(this also allows you to havebashv4 andbashv5 available on the same system) - Scripting OS X: On the Shebang
- Scripting OS X: Setting the PATH in Scripts
Changing a user’s default Shell to bash v5
Even though we have installed bash v5, the default shell of a new Terminal window will still use the built-in bash v3.
The path to the default shell is stored in the user record. You can directly change the UserShell attribute with dscl, in the ‘Advanced Options’ of the ‘Users & Groups’ preference pane, or in Directory Utility.
There is also a command to set the default shell:
The chsh (change shell) command will check for allowed shells in the /etc/shells file. You can easily append a line with /usr/local/bin/bash to this file, and then chsh will work fine.
Note: if you choose to rename the bash binary, you have to use the changed name in /etc/shells and with chsh.
Remember that just running chsh will not change the shell in the current Terminal window. It is best to close the old Terminal window and open a new one to get the new shell.
Packaging bash v5 for mass deployment
While these steps to install and configure bash v5 on a single Mac are simple enough, they would not work well with a management system for hundreds or thousands of Macs. We want to wrap all the files that make install creates into a package installer payload.
The --help option of the configure script yields this useful information:
By default, make install' will install all the files in/usr/local/bin,/usr/local/libetc. You can specify an installation prefix other than/usr/localusing–prefix, for instance–prefix=$HOME`.
When we run the configure script with the --prefix option it creates a folder suitable as a payload for a package installer. We can then use pkgbuild to build to create an installer pkg:
(Note: the --prefix argument requires an absolute path.)
Automate the package creation
So, we have our workflow for building an installer package to distribute and configure bash v5:
- download the archive
- extract the archive
- run
configurewith the--prefixargument - run
make installto create the files in a payload folder - optional: rename the resulting
bashbinary tobash5to avoid conflicts - add a
postinstallscript that adds/usr/local/bin/bash[5]to/etc/shellsif not yet present - build the installer with
pkgbuild
This sounds like a workflow ripe for automation. You can get the script from this repository.
You can pass a different (valid) bash version number as an argument to the script, e.g. 4.4.18. (I did not test anything significantly older.) The script does not autodetect the latest version and defaults to version 5.0 when no argument is given. When an update to bash v5 is published, you will have to modify the version line or run the script with an argument.
I have not (yet) figured out how to detect the latest version from the download web page. An autopkg recipe will have to wait for that. (If someone else wants to tackle that, please do!)
Additionally, SUMO provides native macOS application bundles for its graphical applications, so they can be added to the macOS dock. There is a separate brew cask that will copy these bundles to the Applications folder: brew cask install sumo-gui. 苹果公司在今天（2019.10.08）凌晨正式推送了 macOS Catalina（10.15)更新 ，新系统将诞生了18年的 iTune. You will need a macOS computer running High Sierra or higher with administrative access and an internet connection. Step 1 — Using the macOS Terminal. To access the command line interface on your Mac, you’ll use the Terminal application provided by macOS.
You can install cryptography with pip:
Hi, I am running MacOS X 10.14.3 (German Version) which I installed directly from the downloaded install ISO in the latest VMware Fusion. Now I get a notification form softwareupdate that there is an update available. Updated to reflect the release of macOS 10.5 Catalina Updated to add back PHP 5.6 and PHP 7.0 from and external deprecated keg Updated to reflect the latest release of PHP 7.3 and the removal of PHP 7.0 from Brew.
If this does not work please upgrade your pip first, as that is thesingle most common cause of installation problems.
Supported platforms¶
Currently we test cryptography on Python 3.6+ and PyPy3 7.3.1 on theseoperating systems.
- x86-64 & AArch64 CentOS 8.x
- x86-64 Fedora (latest)
- x86-64 macOS 10.15 Catalina
- x86-64 & AArch64 Ubuntu 18.04, 20.04
- x86-64 Ubuntu rolling
- x86-64 Debian Stretch (9.x), Buster (10.x), Bullseye (11.x), and Sid(unstable)
- x86-64 Alpine (latest)
- 32-bit and 64-bit Python on 64-bit Windows Server 2019
We test compiling with clang as well as gcc and use the followingOpenSSL releases:
OpenSSL1.1.0-latestOpenSSL1.1.1-latest
Building cryptography on Windows¶
The wheel package on Windows is a statically linked build (as of 0.5) so alldependencies are included. To install cryptography, you will typicallyjust run
If you prefer to compile it yourself you’ll need to have OpenSSL installed.You can compile OpenSSL yourself as well or use a binary distribution.Be sure to download the proper version for your architecture and Python(VC2015 is required for 3.6 and above). Wherever you place your copy of OpenSSLyou’ll need to set the LIB and INCLUDE environment variables to includethe proper locations. For example:
As of OpenSSL 1.1.0 the library names have changed from libeay32 andssleay32 to libcrypto and libssl (matching their names on all otherplatforms). cryptography links against the new 1.1.0 names by default. Ifyou need to compile cryptography against an older version then you mustset CRYPTOGRAPHY_WINDOWS_LINK_LEGACY_OPENSSL or else installation will fail.
Catalina Brew Installer
You will also need to have Rust installed andavailable.
If you need to rebuild cryptography for any reason be sure to clear thelocal wheel cache.
Building cryptography on Linux¶
Note
If you are on RHEL/CentOS/Fedora/Debian/Ubuntu or another distributionderived from the preceding list, then you should upgrade pip andattempt to install cryptography again before following the instructionsto compile it below. These platforms will receive a binary wheel andrequire no compiler if you have an updated pip!
cryptography ships manylinux wheels (as of 2.0) so all dependenciesare included. For users on pip 19.0 or above running on a manylinux2010(or greater) compatible distribution (almost everything except Alpine) allyou should need to do is:
If you are on Alpine or just want to compile it yourself thencryptography requires a C compiler, a Rust compiler, headers for Python (ifyou’re not using pypy), and headers for the OpenSSL and libffi librariesavailable on your system.
On all Linux distributions you will need to have Rust installed andavailable.
Alpine¶
Warning
The Rust available by default in Alpine < 3.12 is older than the minimumsupported version. See the Rust installation instructions for information about installing a newer Rust.
If you get an error with openssl-dev you may have to use libressl-dev.
Debian/Ubuntu¶
Warning
The Rust available in current Debian stable and some Ubuntu versions isolder than the minimum supported version. Ubuntu 18.04 and 20.04 aresufficiently new, but otherwise please see theRust installation instructions for informationabout installing a newer Rust.
Fedora/RHEL 8/CentOS 8¶
Warning
For RHEL and CentOS you must be on version 8.3 or newer for the commandbelow to install a sufficiently new Rust. If your Rust is less than 1.41.0please see the Rust installation instructionsfor information about installing a newer Rust.
RHEL 7/CentOS 7¶
Warning
How To Install Brew On Catalina
You must install Rust using the Rust installation instructions. cryptography requires a Rust version newer thanwhat is provided in the distribution packages.
Building¶
You should now be able to build and install cryptography. To avoid gettingthe pre-built wheel on manylinux compatible distributions you’ll need touse --no-binary.
Using your own OpenSSL on Linux¶
Python links to OpenSSL for its own purposes and this can sometimes causeproblems when you wish to use a different version of OpenSSL with cryptography.If you want to use cryptography with your own build of OpenSSL you will need tomake sure that the build is configured correctly so that your version ofOpenSSL doesn’t conflict with Python’s.
The options you need to add allow the linker to identify every symbol correctlyeven when multiple versions of the library are linked into the same program. Ifyou are using your distribution’s source packages these will probably bepatched in for you already, otherwise you’ll need to use options something likethis when configuring OpenSSL:
Static Wheels¶
Macos Catalina Brew Install Java
Cryptography ships statically-linked wheels for macOS, Windows, and Linux (viamanylinux). This allows compatible environments to use the most recentOpenSSL, regardless of what is shipped by default on those platforms. SomeLinux distributions (most notably Alpine) are not manylinux compatible sowe cannot distribute wheels for them.
However, you can build your own statically-linked wheels that will work on yourown systems. This will allow you to continue to use relatively old Linuxdistributions (such as LTS releases), while making sure you have the mostrecent OpenSSL available to your Python programs.
To do so, you should find yourself a machine that is as similar as possible toyour target environment (e.g. your production environment): for example, spinup a new cloud server running your target Linux distribution. On this machine,install the Cryptography dependencies as mentioned in Building cryptography on Linux.Please also make sure you have virtualenv installed: this should beavailable from your system package manager.
Macbook Catalina Install Brew
Then, paste the following into a shell script. You’ll need to populate theOPENSSL_VERSION variable. To do that, visit openssl.org and find thelatest non-FIPS release version number, then set the string appropriately. Forexample, for OpenSSL 1.0.2k, use OPENSSL_VERSION='1.0.2k'.
When this shell script is complete, you’ll find a collection of wheel files ina directory called wheelhouse. These wheels can be installed by asufficiently-recent version of pip. The Cryptography wheel in thisdirectory contains a statically-linked OpenSSL binding, which ensures that youhave access to the most-recent OpenSSL releases without corrupting your systemdependencies.
Building cryptography on macOS¶
Note
If installation gives a fatalerror:'openssl/aes.h'filenotfoundsee the FAQ for information about how to fix this issue.
The wheel package on macOS is a statically linked build (as of 1.0.1) so forusers with pip 8 or above you only need one step:
If you want to build cryptography yourself or are on an older macOS version,cryptography requires the presence of a C compiler, development headers, andthe proper libraries. On macOS much of this is provided by Apple’s Xcodedevelopment tools. To install the Xcode command line tools (on macOS 10.10+)open a terminal window and run:
Macos Catalina Brew Install
This will install a compiler (clang) along with (most of) the requireddevelopment headers.
You will also need to have Rust installed andavailable, which can be obtained from Homebrew,MacPorts, or directly from the Rust website.
Finally you need OpenSSL, which you can obtain from Homebrew or MacPorts.Cryptography does not support the OpenSSL/LibreSSL libraries Apple shipsin its base operating system.
To build cryptography and dynamically link it:
MacPorts:
You can also build cryptography statically:
MacPorts:
If you need to rebuild cryptography for any reason be sure to clear thelocal wheel cache.
Rust¶
Note
If you are on RHEL/CentOS/Fedora/Debian/Ubuntu or another distributionderived from the preceding list, then you should upgrade pip (ina virtual environment!) and attempt to install cryptography againbefore trying to install the Rust toolchain. These platforms will receivea binary wheel and require no compiler if you have an updated pip!
Building cryptography requires having a working Rust toolchain. The currentminimum supported Rust version is 1.41.0. This is newer than the Rust mostpackage managers ship, so users will likely need to install with theinstructions below.
Instructions for installing Rust can be found on the Rust Project’s website.We recommend installing Rust with rustup (as documented by the RustProject) in order to ensure you have a recent version.
Rust is only required when building cryptography, meaning that you mayinstall it for the duration of your pipinstall command and then remove itfrom a system. A Rust toolchain is not required to usecryptography. Indeployments such as docker, you may use a multi-stage Dockerfile whereyou install Rust during the build phase but do not install it in the runtimeimage. This is the same as the C compiler toolchain which is also required tobuild cryptography, but not afterwards.
- 1Notes
Some system emulations on Linux use KVM, a special emulation mode which claims to reach nearly native speed.KVM is mainly used for x86 (32 and 64 bit) emulation on x86 hosts running Linux. Should you want to run Qemu with KVM support on a G5, depending on your distribution, you might have to compile your own kernel with KVM support.
If your host's (your computer) architecture matches the guest's (QEMU) architecture and is running Mac OS 10.10 or higher, then you could speed up execution to near native speed using this option: -accel hvf
Catalina Brew Install
Installing QEMU using a package manager
Building QEMU for macOS
Macos Catalina Brew Install Mysql
The system requirements are:
- One of the two most recent versions of macOS (currently Catalina or Big Sur)
- The clang compiler shipped with the version of Xcode for that OS X. GCC might also work, but we recommend clang
Macos Catalina Brew Install
Additional build requirements are:
make (when installed through brew, make is installed as gmake, so use gmake)
After downloading the QEMU source code, double-click it to expand it.
Then configure and make QEMU. The target-list option is used to build only the machine or machines you want. If you don't specify it, all machines would be built. Probably not what you want.
This way doesn't require you to wait for the configure command to complete:
If your system has the 'say' command, you can use it to tell you when QEMU is done
You can use './configure --help' to see a full list of options.
Here are all the currently available machines:
- aarch64-softmmu
- alpha-softmmu
- arm-softmmu
- cris-softmmu
- i386-softmmu
- lm32-softmmu
- m68k-softmmu
- microblaze-softmmu
- microblazeel-softmmu
- mips-softmmu
- mips64-softmmu
- mips64el-softmmu
- mipsel-softmmu
- moxie-softmmu
- or32-softmmu
- ppc-softmmu
- ppc64-softmmu
- ppcemb-softmmu
- s390x-softmmu
- sh4-softmmu
- sh4eb-softmmu
- sparc-softmmu
- sparc64-softmmu
- tricore-softmmu
- unicore32-softmmu
- x86_64-softmmu
- xtensa-softmmu
- xtensaeb-softmmu
We recommend building QEMU with the -default compiler provided by Apple, for your version of Mac OS X (which will be 'clang'). The configure script will automatically pick this.
Errors on old compilers
Note: If after the configure step you see a message like this:
you may have to install your own version of gcc. You can build it from source (expect that to take several hours) or obtain third party binaries of gcc available from Homebrew or MacPorts.
You can have several versions of GCC on your system. To specify a certain version, use the --cc and --cxx options.
Build with LLVM/Clang 7
If you need to compile with newer versions of clang (to get f.i. AVX/AVX2 support), you can install llvm through e.g., brew.
Note that building for machines with CPUs supporting such extensions will exclude running your binary on earlier machines.
Compile with:
Contacts
If there are any issues with this web page, please let me know.