Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in / Register
  • G ghcup-hs
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 100
    • Issues 100
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 7
    • Merge requests 7
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Haskell
  • ghcup-hs
  • Issues
  • #318
Closed
Open
Created Feb 26, 2022 by Simon Michael@simonmichael

ghcup mac binaries should be signed

On macos monterrey (12.2.1) on m1, at least, the ghcup v0.1.17.5 binary installed by ghcup upgrade didn't run because of an invalid signature (probably disrupted by stripping). This has now been worked around by not stripping them. But such unsigned binaries are probably (can't recheck on my system) hard to run because of giving the "could not check for malicious software" warning, which must be bypassed eg in System Preferences > Security & Privacy for each new ghcup version. codesign -s - BINARY seems to be a way to fix stripped binaries, adding an adhoc signature and bypassing the warning. But ideally these binaries should be signed with an official Apple developer ID, to prove they are genuine. A Haskell Foundation developer ID or similar might be ideal.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking