Skip to content

[temurin-compliance] Add "sshd" app to all Mac node System->Privacy&Security->Screen Recording/Accessibility to enable Arctic automation

Summary

To allow Jenkins jobs running Arctic automation for automated GUI testing, we need to allow Jenkins agent launched jobs to be able to read the ScreenRecording and Accessibility.

I believe this requires the sshd app which launches the Jenkins agent process and thus sub-job process running Arctic, to have "System->Security&Privacy->Screen Recording" & "Accessibility" access.

  1. Please can we initially test this concept on node esmv4-macos11-arm64 (207.254.28.13), as follows:
  • System Preferences->Security&Privacy->Screen Recording
  • "+" to add an app
  • Finder opens... to view /usr system folder press "Cmd+Shift+." (Cmd+Shift+"dot")
  • Navigate to /usr/sbin and find sshd, and select "open" to add to "Screen Recording"
  • Repeat for System Preferences->Security&Privacy->Accessibility
  • Let me know to test if it works... thanks :-)
  1. If test (1) is confirmed successful, then the setting will need applying to the other nodes:
  • gn324-macos11-x64
  • iywk3-macos11-x64
  • noh7B-macos12-arm64
  • jck-aema7-macos11-x64
  1. Document the necessary setting in whatever ansible/docs are used for provisioning of new Mac nodes...

Steps to reproduce

(How one can reproduce the issue - this is very important)

What is the current bug behavior?

(What actually happens)

What is the expected correct behavior?

(What you should see instead)

Relevant logs and/or screenshots

(Add a link to or paste any relevant logs - please use code blocks (```) to format console output, logs, and code, as it's very hard to read otherwise.)

Priority

  • Urgent
  • High
  • Medium
  • Low

Severity

  • Blocker
  • Major
  • Normal
  • Low

Impact

(What is the impact of this issue? Is it blocking a release? Are there any time constraints?, for example: "We have a release tomorrow")

Edited by Andrew Leonard