SalastilandClaude Opus 5.5
5a8d7f7ad8
moho will not be code-signed. Windows 11's Smart App Control refuses to start an unsigned program at all - moho installs, then never opens, with no message - while the installer itself is let through. So the installer now reads Smart App Control's state and, when it is on, says before installing that moho will not start, where to turn it off, and that Windows will not let it back on without a reset; OK installs anyway, Cancel leaves nothing behind. The README and the rolling release's notes say the same, with the SmartScreen "More info > Run anyway" / Unblock step. Checked on the Windows VM (Smart App Control enforcing): the warning comes before the first page, and Cancel quits with nothing installed. Co-Authored-By: Claude Opus 5.5 <[email protected]>
70 lines
3.4 KiB
NSIS
70 lines
3.4 KiB
NSIS
; moho's additions to electron-builder's NSIS installer. Picked up by
|
|
; electron-builder because of where it lives (build/installer.nsh).
|
|
|
|
; electron-builder's own app check needs these, and leaves them out when
|
|
; a project brings its own check - as this one does, below.
|
|
!include "getProcessInfo.nsh"
|
|
Var pid
|
|
|
|
; moho's daemon keeps running after the window closes, by design - and so
|
|
; keeps nobilis.exe open. An upgrade or an uninstall that cannot replace or
|
|
; remove that file leaves the old daemon behind, which is how a new window
|
|
; ends up talking to an old daemon. Stopped first, every time.
|
|
!macro mohoStopDaemon
|
|
nsExec::Exec '"$SYSDIR\taskkill.exe" /F /IM nobilis.exe'
|
|
Pop $0
|
|
Sleep 500
|
|
!macroend
|
|
|
|
; Once installing has actually begun - after Install is pressed, not when the
|
|
; installer opens, or opening it and cancelling would have cut a running moho
|
|
; off from its daemon. Then electron-builder's own check for the window.
|
|
!macro customCheckAppRunning
|
|
!insertmacro mohoStopDaemon
|
|
!insertmacro IS_POWERSHELL_AVAILABLE
|
|
!insertmacro _CHECK_APP_RUNNING
|
|
!macroend
|
|
|
|
; moho is not code-signed, and Windows 11's Smart App Control refuses to
|
|
; start an unsigned program at all - no window, no error, nothing - while
|
|
; this installer itself is let through. So the install would succeed and the
|
|
; app would then silently never open (#264). Said here instead, before
|
|
; anything is installed: what to switch off and where, or stop.
|
|
;
|
|
; VerifiedAndReputablePolicyState: 0 off, 1 on, 2 evaluating. Only "on"
|
|
; blocks; an evaluating machine runs moho, and Windows may later switch
|
|
; Smart App Control off by itself on a machine like that.
|
|
!macro customInit
|
|
ReadRegDWORD $0 HKLM "SYSTEM\CurrentControlSet\Control\CI\Policy" "VerifiedAndReputablePolicyState"
|
|
${if} $0 == 1
|
|
MessageBox MB_OKCANCEL|MB_ICONEXCLAMATION \
|
|
"Smart App Control is on, and it will stop moho from starting.$\r$\n$\r$\nmoho is not code-signed, and Smart App Control blocks every program that is not - silently, with no message. To use moho, turn it off:$\r$\n$\r$\n Windows Security > App & browser control > Smart App Control settings > Off$\r$\n$\r$\nWindows does not let Smart App Control be switched back on without resetting the PC.$\r$\n$\r$\nOK to install anyway (turn it off before opening moho), or Cancel." \
|
|
/SD IDOK IDOK mohoSacContinue
|
|
Quit
|
|
mohoSacContinue:
|
|
${endIf}
|
|
!macroend
|
|
|
|
; What the program leaves outside its own folder. Not touched by an upgrade,
|
|
; which runs the old uninstaller too (isUpdated): a new version keeps
|
|
; everything the old one had.
|
|
!macro customUnInstall
|
|
; Confirmed by now, so stopping it costs nothing that was not agreed to.
|
|
!insertmacro mohoStopDaemon
|
|
${ifNot} ${isUpdated}
|
|
; A download cache, nobody's data. Always.
|
|
RMDir /r "$LOCALAPPDATA\moho-updater"
|
|
; Accounts with their saved sign-ins, history, caches. Asked, because
|
|
; someone reinstalling wants them back - but asked, because someone
|
|
; uninstalling may well expect a saved sign-in to go with the program.
|
|
; No in a silent uninstall.
|
|
MessageBox MB_YESNO|MB_ICONQUESTION|MB_DEFBUTTON2 \
|
|
"Also remove your moho accounts, their saved sign-ins and the message history kept on this computer?$\r$\n$\r$\nChoose No to keep them for when moho is installed again." \
|
|
/SD IDNO IDNO mohoKeepData
|
|
RMDir /r "$APPDATA\moho"
|
|
RMDir /r "$APPDATA\nobilis"
|
|
RMDir /r "$LOCALAPPDATA\nobilis"
|
|
mohoKeepData:
|
|
${endIf}
|
|
!macroend
|