MacOS notarization

It seems that macOS Catalina may require that all "Apps" (which I believe covers GHC, although it is such a vague term that it is hard to tell) must be "notarized". I suppose this is yet another hoop that we will have to jump through. Sigh...

Temporary workaround

Users can explicitly mark the binary distribution as trusted after extraction by running xattr -rc $path_to_bindist_directory.

References

• NodeJS issue
• golang issue
• GraalVM issue
• Mono issue
• a potential workaround although apparently this requires that the user have root
• macports thread
• a useful StackOverflow question
• bit of prose from Apple which states that all software released after Jan 2020 will need to use the hardened runtime