Sign node exporter darwin binary with rcodesign (#3008)

* Sign node exporter darwin binary with rcodesign Prevents SIGKILL issues on macs Signed-off-by: Alper Polat <[email protected]> * Be explicit about checking for the binary Co-authored-by: Ben Kochie <[email protected]> Signed-off-by: Alper Polat <[email protected]> * Also attempt to sign darwin-amd64 Signed-off-by: Alper Polat <[email protected]> --------- Signed-off-by: Alper Polat <[email protected]> Signed-off-by: Alper Polat <[email protected]> Co-authored-by: Ben Kochie <[email protected]>
prometheus · May 2, 2024 · 2ecbe97 · 2ecbe97
1 parent 5a4e691
commit 2ecbe97
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -49,6 +49,16 @@ jobs:
       - run: docker run --privileged linuxkit/binfmt:af88a591f9cc896a52ce596b9cf7ca26a061ef97
       - run: promu crossbuild -v --parallelism $CIRCLE_NODE_TOTAL --parallelism-thread $CIRCLE_NODE_INDEX
       - run: promu --config .promu-cgo.yml crossbuild -v --parallelism $CIRCLE_NODE_TOTAL --parallelism-thread $CIRCLE_NODE_INDEX
+      # sign the darwin build so it doesn't get SIGKILLed on start, see: https://github.com/prometheus/node_exporter/issues/2539
+      - run:
+          command: |
+            if [[ -f "$(pwd)/.build/darwin-arm64/node_exporter" ]]; then
+                promu codesign "$(pwd)/.build/darwin-arm64/node_exporter"
+            fi
+
+            if [[ -f "$(pwd)/.build/darwin-amd64/node_exporter" ]]; then
+                promu codesign "$(pwd)/.build/darwin-amd64/node_exporter"                
+            fi
       - persist_to_workspace:
           root: .
           paths: