Deliver macOS binaries in a way that doesn't require security overrides

[ahl]

This might mean signing the binary, but I notice that binaries installed by Homebrew aren't signed. We may need to provide instructions for downloading and installing the cli in a way that doesn't incur the security red flags.

[ahl]

This allegedly removes the warning xattr -dr com.apple.quarantine oxide

[ahl]

I think we may need to create and sign an installer--not the binary itself.

[elaine-oxide]

I decided to download the pre-built macOS Apple Silicon binary for the Oxide CLI from:
https://github.com/oxidecomputer/oxide.rs/releases
(today is v0.5.0+20240502.0)

In the macOS Terminal window, I verified the checksum with shasum -a 256 <filename>, then I did tar xvf <filename>.

Then still in the macOS Terminal window, I immediately tried to run ./oxide --help.

Since the oxide binary is not signed, it popped up a window with two useless buttons (window which I can no longer easily regenerate for testing purposes, as undoing the exception below is too annoying), and I chose the button which closed the window.

Since I am familiar with security exceptions and I will just assume the oxide binary is not malicious, I went to the Finder and on oxide I did Control-Click (or Command-Click) and Open With -> Terminal.app

Then I went back to my Terminal window and was able to proceed with ./oxide --help.

However, there is very little (no) documentation on what to do with the pre-built binaries, especially in this case of macOS, as the user needs to know the magic trick to do the security exception (there are other ways, but the Finder is the easiest), which may be a bit alarming for the user, as it shows many warnings about untrusted/malicious developer(s).

I'm running Little Snitch, and it gives me some more warnings when I try to do oxide auth login --host <hostname>.

In case we're interested, it looks like it is 99 USD/year to have the ability to sign the binary.
https://developer.apple.com/support/compare-memberships/

The Quick Start is not so quick so far, because I have to do a bunch of undocumented steps before I can start: https://docs.oxide.computer/cli/guides/quickstart

[elaine-oxide]

Following up with more details based on my last comment.

Today I followed the same steps as in my last comment, but I downloaded the pre-built macOS Apple Silicon macOS binary for Oxide CLI v0.6.1+20240710.0.

Here is a screenshot of the aforementioned window with the two useless buttons that appears when I try to run oxide --help.

In Finder, on oxide, I did Control-Click (or Command-RightClick) and Open With -> Terminal.app, to get the option for overriding system security: