I am trying to get Docker installed on macOS High Sierra. I've installed Docker via
brew, I can start the docker-machine when logged in as root (
sudo -i -u root). But when I use LaunchDaemon the Docker machine fails to start.
In the logging I have found that this is because of code signing (probably). MacOS error -67062. My LaunchDaemon plist looks like this:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>EnvironmentVariables</key> <dict> <key>PATH</key> <string>/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin</string> </dict> <key>Label</key> <string>rna.docker-machine</string> <key>ProgramArguments</key> <array> <string>/usr/local/opt/docker-machine/bin/docker-machine</string> <string>start</string> <string>lunaservices</string> </array> <key>RunAtLoad</key> <true/> <key>WorkingDirectory</key> <string>/usr/local</string> </dict> </plist>
Other than changing
taskgated startup not to bother about code signing (which, even if it was possible is not a good plan), is there a way I can tell macOS not to bother with code signing for this particular program/launch?
My guess is that I have to codesign docker-machine, which lives in
/usr/local/Cellar/docker-machine/0.16.0/bin but I haven't been able to find documentation on how to exactly do that by hand (i.e. what identity to use, etc.). Am I on the right track? And what should I do/try?