Skip to content

On startup while code sign --display command fails due to unrecognized ---xml option on Catalina #1975

Description

@ierturk

Description

It seems that on older MacOS versions (Catalina), the --xml option is not supported by the command codesign and the check fails for the status signedness.

$ limactl start
INFO[0000] Using the existing instance "default"        
WARN[0000] QEMU binary "/opt/local/bin/qemu-system-x86_64" does not seem properly signed with the "com.apple.security.hypervisor" entitlement  error="failed to run [codesign --display --entitlements - --xml /opt/local/bin/qemu-system-x86_64]: exit status 2 (out=\"codesign: unrecognized option `--xml'\\nUsage: codesign -s identity [-fv*] [-o flags] [-r reqs] [-i ident] path ... # sign\\n       codesign -v [-v*] [-R=<req string>|-R <req file path>] path|[+]pid ... # verify\\n       codesign -d [options] path ... # display contents\\n       codesign -h pid ... # display hosting paths\\n\")"
? Try to sign "/opt/local/bin/qemu-system-x86_64" with the "com.apple.security.hypervisor" entitlement? Yes
WARN[0001] Failed to sign "/opt/local/bin/qemu-system-x86_64"  error="failed to run [codesign --sign - --entitlements /var/folders/bj/58cccq_j2hbgglcw7xvfsl2h0000gn/T/lima-qemu-entitlements-612410575.xml --force /opt/local/bin/qemu-system-x86_64]: exit status 1 (out=\"/opt/local/bin/qemu-system-x86_64: replacing existing signature\\n/opt/local/bin/qemu-system-x86_64: resource fork, Finder information, or similar detritus not allowed\\n\")"

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions