Binaries for macOS on AArch64 are not sufficiently signed
When I downloaded https://downloads.haskell.org/ghc/9.2.1/ghc-9.2.1-aarch64-apple-darwin.tar.xz, I had to manually enable my computer to execute each package that ships with GHC, once during the installation process and then again when launching GHC for the first time. This is annoying, and it does not inspire confidence. I can understand that I've just downloaded strange software over the internet and that it requires me to assert that I know what I'm doing... but is it possible to do this just once instead of about 20 times? If not, then I think we should direct users (strongly) to get their GHCs via another mechanism.
Some context: I like to download GHC directly instead of using e.g. ghcup
, so that I can move GHCs in and out of place with stow. Maybe ghcup
replicates that functionality, but I use stow
for lots of things, and it's nice to centralize my installed-version control.