Document macOS PKG installer createdump executable bit regression

[Copilot]

The .NET 10.0 macOS PKG installers install createdump without the executable bit, breaking dump collection scenarios (test hang collectors, dotnet-dump collect, crash handlers).

Changes

• Added known issue entry to release-notes/10.0/known-issues.md documenting the regression
• Included workarounds: manually chmod +x shared/Microsoft.NETCore.App/10.0.0/createdump or use tarball installations instead of PKG installers

Context

Fixed upstream in dotnet/arcade#16271, but .NET 10.0 RTM ships with the regression. This documents the issue and workarounds for users until servicing releases.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• api0.prismacloud.io
  • Triggering command: /usr/bin/python3 /home/REDACTED/.local/bin/checkov --config-file .checkov.yml --directory . --quiet (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>createdump lacking exec bit on macOS PKG installers</issue_title>
<issue_description>### Description

Regressed in the installer:

-rw-r--r--  1 root  wheel   201K Oct  2 15:56 /usr/local/share/dotnet/shared/Microsoft.NETCore.App/10.0.0-rc.2.25502.107/createdump
-rwxr-xr-x  1 root  wheel   185K Sep 26 11:21 /usr/local/share/dotnet/shared/Microsoft.NETCore.App/9.0.10/createdump
-rwxr-xr-x  1 root  wheel   185K Sep 26 11:50 /usr/local/share/dotnet/shared/Microsoft.NETCore.App/8.0.21/createdump

That same bit is present in tar install of runtime or SDK.

Reproduction Steps

Install runtime from https://dot.net/downloads

Expected behavior

Crashes and dotnet-dump collect should work.

Actual behavior

createdump fails to execute.

Regression?

Yes, from 9.0

Known Workarounds

Add exec bit manually.

Configuration

Any macOS 10.0 PKG installed runtime

Other information

No response</issue_description>

<agent_instructions>Look at my last comment - add such a not to the known issue markdown.</agent_instructions>

Comments on the Issue (you are @copilot in this section)

@hoyosjs Looks like `Target Name="PublishToDisk"` isn't finding createdump as part of its find. @hoyosjs In https://github.com/dotnet/arcade/blob/d8816877a6b0e6cb39cb57d92557ad4952715a2e/src/Microsoft.DotNet.SharedFramework.Sdk/targets/sharedfx.targets#L621-L624

The dylibs are also not getting exec perms. Oddly enough this goes as far back as 20250816.5 on VMR 10.0 - but VMR main is OK. I have a feeling this is related to the way signing is handling pkgs. </comment_new>
<comment_new>@hoyosjs
dotnet/dotnet#2491 this wasn't a fix for this case. </comment_new>
<comment_new>@hoyosjs
@am11 - not saying it needs them. But rather that something stripped it. It seems like it was signing indeed. </comment_new>
<comment_new>@hoyosjs

-rw-r--r--  1 root  wheel    158528 Sep  1 17:52 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/10.0.0-rc.1.25451.107/runtimes/osx-arm64/native/apphost
-rw-r--r--  1 root  wheel  10715520 Sep  1 17:52 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/10.0.0-rc.1.25451.107/runtimes/osx-arm64/native/singlefilehost
-rw-r--r--  1 root  wheel    158528 Oct  2 15:56 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/10.0.0-rc.2.25502.107/runtimes/osx-arm64/native/apphost
-rw-r--r--  1 root  wheel  10733200 Oct  2 15:56 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/10.0.0-rc.2.25502.107/runtimes/osx-arm64/native/singlefilehost
-rwxr-xr-x  1 root  wheel    140512 Sep 26 11:50 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/8.0.21/runtimes/osx-arm64/native/apphost
-rwxr-xr-x  1 root  wheel  10383408 Sep 26 11:50 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/8.0.21/runtimes/osx-arm64/native/singlefilehost
-rwxr-xr-x  1 root  wheel    139536 Oct 29  2024 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.0/runtimes/osx-arm64/native/apphost
-rwxr-xr-x  1 root  wheel  10994336 Oct 29  2024 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.0/runtimes/osx-arm64/native/singlefilehost
-rwxr-xr-x  1 root  wheel    141024 Sep 26 11:21 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.10/runtimes/osx-arm64/native/apphost
-rwxr-xr-x  1 root  wheel  10807024 Sep 26 11:21 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.10/runtimes/osx-arm64/native/singlefilehost
-rwxr-xr-x  1 root  wheel    140896 May 19 18:58 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.6/runtimes/osx-arm64/native/apphost
-rwxr-xr-x  1 root  wheel  10806864 May 19 18:58 /usr/local/share/dotnet/packs/Microsoft.NETCore.App.Host.osx-arm64/9.0.6/runtimes/osx-arm64/native/singlefilehost

This regression also affects the in-box pkg apphost and SF host (cc: @agocke @mmitche )</comment_new>
<comment_new>@agocke
Host should be OK, we chmod in the writer: https://github.com/dotnet/runtime/blob/9f1cab7b875fe7c04d7b25c67555e8dadab2b600/src/installer/managed/Microsoft.NET.HostModel/AppHost/HostWriter.cs#L182</comment_new>
<comment_new>@mmitche

@am11 - not saying it needs them. But rather that something stripped it. It seems like it was signing indeed.

Did you eliminate signing as the culprit here?</comment_new>
<comment_new>@hoyosjs
next 10.0 build will have dotnet/arcade#16271
We'll need a note of known issues for 10.0.0 @steveisok </comment_new>
<comment_new...

• Fixes createdump lacking exec bit on macOS PKG installers runtime#121258

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.