Sign macOS binaries

[arif-desu]

Up until recently, the media writer disk images came notarized and signed, making it easy to install. With this not being the case anymore with recent builds, gatekeeper prevents even opening the disk image.

While you can simply remove the quarantine attribute from the disk image, it's not a good practice to follow, and may prove difficult to execute to the not so technical guys.

Kindly provide notarized and signed macOS disk images (especially for the arm64 versions, since that is pretty common amongst people in recent times.)

[whitehotaru]

Came here because of the same problem. Even playing around with spctl didn't help.

[sneedgroup-holder]

Have yall tried using a device profile to force gatekeeper to open all apps even unsigned? I did that and it works for me. Hacky workaround, I know.

[arif-desu]

Have yall tried using a device profile to force gatekeeper to open all apps even unsigned? I did that and it works for me. Hacky workaround, I know.

That is not how anyone should use their computers in modern times. Apple's lucrative pricing on dev account aside, there's a reason the whole signing process and Gatekeeper exists. It also exists on Windows, just a lot more easy to bypass the SmartScreen filter for common users who don't know any better.

It's not even a question of money at this point, since Fedora can afford the annual dev account fees, and the past builds have, in fact, been signed; just ignorance since most users are probably assumed to be on Linux and/or Windows.

[sneedgroup-holder]

informative yet unfortunate.