docker
Sign binary with Docker, Inc certificate.
on OSX
- Download from release page
- run it from terminal gets
Had to manually dance around to fix the quarantine
It needs to be signed before shipping, now, if you stop releasing it here and you pass the" hot potato" to the desktop team and they sign it, why not. Talk to them maybe :: cc @mat007
We can sign it in Docker Desktop but the release cycle for Desktop is perhaps much longer than what we would like for a fast feedback loop? How come we didn’t have that issue before with other stand-alone tools? Doesn’t for instance Docker CLI have mac builders to sign?
Nope, we do cross-compile on the CLI, no macOS workers.
@jeanlaurent did you install by downloading through your browser, or (e.g.) curl? IIRC, a workaround is to use curl, in which case macOS doesn't verify
Found a neat blog post explaining what needs to be done: https://www.kencochrane.com/2020/08/01/build-and-sign-golang-binaries-for-macos-with-github-actions/
We would need someone with enough access to add the certificate and its password to this repo and then we can make it so that the release has a signed binary.
Or someone should give me the certificate and I can do it locally on my machine if we are not ok with having these in a repo