From 2585a960b90ce79a88f4bd3524139705b80263cf Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Fri, 13 Mar 2026 16:20:43 -0700 Subject: [PATCH] Update alloy build instructions: Go 1.25.7 and codesign step SCP'd binaries from another Mac get com.apple.provenance quarantine and macOS kills them. Ad-hoc codesign (codesign --sign - --force) resolves this without GUI approval. Co-Authored-By: Claude Opus 4.6 --- ansible/roles/alloy/defaults/main.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ansible/roles/alloy/defaults/main.yml b/ansible/roles/alloy/defaults/main.yml index 8954d87..fa840d4 100644 --- a/ansible/roles/alloy/defaults/main.yml +++ b/ansible/roles/alloy/defaults/main.yml @@ -13,7 +13,7 @@ # git clone ssh://forgejo@forge.ops.eblu.me:2222/mirrors/alloy.git ~/code/3rd/alloy # # 2. Set up build tools via mise: -# cd ~/code/3rd/alloy && mise use go@1.25 node yarn +# cd ~/code/3rd/alloy && mise use go@1.25.7 node yarn # # 3. Build with CGO enabled (default in Makefile): # cd ~/code/3rd/alloy && mise x -- make alloy @@ -21,7 +21,10 @@ # 4. Copy binary to indri: # scp ~/code/3rd/alloy/build/alloy indri:~/.local/bin/alloy # -# 5. Run ansible to deploy config and LaunchAgent +# 5. Ad-hoc codesign on indri (SCP'd binaries get quarantined by macOS): +# ssh indri 'codesign --sign - --force ~/.local/bin/alloy' +# +# 6. Run ansible to deploy config and LaunchAgent # Binary and paths alloy_binary: /Users/erichblume/.local/bin/alloy