[MacPorts] #70890: openjdk21 @21.0.3_1+release+server : build fails on Sonoma 14.7 with "xattr: [Errno 13] Permission" denied error

[MacPorts]

#70890: openjdk21 @21.0.3_1+release+server :  build fails on Sonoma 14.7 with
"xattr: [Errno 13] Permission" denied error
-------------------------+----------------------
  Reporter:  lima-bravo  |      Owner:  breun
      Type:  defect      |     Status:  assigned
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:  2.10.1
Resolution:              |   Keywords:
      Port:  openjdk21   |
-------------------------+----------------------

Comment (by breun):

 Replying to [comment:17 jjstickel]:
 > Replying to [comment:16 breun]:
 >
 > > * Is the presence of the `com.apple.provenance` attribute the cause of
 your build failing?
 >
 > Yes.

 I’m not saying it isn’t, but what exactly is the proof for this?

 > > * Which `xattr` command is getting executed exactly and why does it
 result in a '[Errno 13] Permission denied' error?
 >
 > See https://trac.macports.org/ticket/70890#comment:2

 That is my own comment, but I don’t see what `xattr` command exactly is
 getting executed there, only the resulting error message.

 > > * Why can't you remove the attribute? (I believe this should be
 possible when ` > System Preferences > Security & Privacy > Privacy >
 Full Disk Access > Terminal` is on.)
 >
 > See https://trac.macports.org/ticket/70890?replyto=16#comment:5 and the
 next few comments. Terminal (for reporter) and iTerm2 (for me) have full
 disk access.

 If removing this extended attribute doesn’t work for you, then I’m afraid
 only Apple can possibly fix that, so you may have to report that issue to
 them.

 > I don't know the answers to your other questions about why this doesn't
 happen on CI and why `com.apple.provenance` appears. I'll ask a question
 of my own:  is SIP enabled on the CI VM?

 I don’t know, but I would expect it to be. Ryan can probably confirm this.
 I do know it’s enabled on my personal macOS 15.1 machine, which doesn’t
 have this issue.

-- 
Ticket URL: <https://trac.macports.org/ticket/70890#comment:18>
MacPorts <https://www.macports.org/>
Ports system for macOS