macOS: media capture permission missing

[letmaik]

Description
I'm trying to capture output from a virtual camera with OpenCV, however there seem to be some permissions missing: https://developer.apple.com/documentation/avfoundation/cameras_and_media_capture/requesting_authorization_for_media_capture_on_macos?language=objc

Area for Triage:

Apple

Question, Bug, or Feature?:
Bug

Virtual environments affected

• Ubuntu 16.04
• Ubuntu 18.04
• Ubuntu 20.04
• macOS 10.15
• macOS 11.0
• Windows Server 2016 R2
• Windows Server 2019

Image version

20210510.1

Expected behavior
macOS should not interactively ask for permissions in CI.

Actual behavior
Not sure, but likely a permission prompt pops up.

Repro steps
Install OBS (or just the virtual camera with https://github.com/letmaik/pyvirtualcam/blob/master/.github/scripts/install-macos-obs-virtual-cam.sh), then run:

# pip install opencv-python
import cv2
vc = cv2.VideoCapture(0)
assert vc.isOpened()

Linked: opencv/opencv#20094 opencv/opencv-python#291

[Darleev]

Hello @letmaik,
We will investigate the issue.

[Darleev]

Hello @letmaik,
Unfortunately, at this time it's not possible to prove required permissions on agent machines, since there is no way to accept pop-up window with permissions access. We had similar request, but could not find any suitable solution for this. Maybe you have ideas or a probable solution for this?
We are looking forward to your reply.

[Darleev]

@letmaik I'm going to close the issue.
If additional assistance is required, do not hesitate to contact us.

[letmaik]

I understand there may not be an immediate solution but it is still an unresolved issue. Why not keep the issue open? Other CI providers seem to have resolved this issue, and I'd rather not switch away from GitHub Actions because of this.

[Darleev]

@letmaik Unfortunately, at this time, we made a decision to keep System Integrity Protection enabled on our macOS images( please refer the link for more information). However, with SIP enabled, it is not possible to automatically accept a security pop-up window.