0

I am trying to get Docker installed on macOS High Sierra. I've installed Docker via brew, I can start the docker-machine when logged in as root (sudo -i -u root). But when I use LaunchDaemon the Docker machine fails to start.

In the logging I have found that this is because of code signing (probably). MacOS error -67062. My LaunchDaemon plist looks like this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>EnvironmentVariables</key>
    <dict>
        <key>PATH</key>
        <string>/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin</string>
    </dict>
    <key>Label</key>
    <string>rna.docker-machine</string>
    <key>ProgramArguments</key>
    <array>
        <string>/usr/local/opt/docker-machine/bin/docker-machine</string>
        <string>start</string>
        <string>lunaservices</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>WorkingDirectory</key>
    <string>/usr/local</string>
  </dict>
</plist>

Other than changing taskgated startup not to bother about code signing (which, even if it was possible is not a good plan), is there a way I can tell macOS not to bother with code signing for this particular program/launch?

My guess is that I have to codesign docker-machine, which lives in /usr/local/Cellar/docker-machine/0.16.0/bin but I haven't been able to find documentation on how to exactly do that by hand (i.e. what identity to use, etc.). Am I on the right track? And what should I do/try?

You must log in to answer this question.

Browse other questions tagged .