ipfs/distributions

Add instructions how to get unsigned binaries

Open

#377 opened on Aug 3, 2021

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Less (31 forks)auto 404
P3help wanted

Repository metrics

Stars
 (49 stars)
PR merge metrics
 (PR metrics pending)

Description

#367 introduced macos signing, which appends signature to the end of binary.

Would be useful to expand https://github.com/ipfs/distributions/blob/master/README.md#notes-on-reproducible-builds section with info how to undo signing and get the original binary, so people working on reproducible builds can wire up verification with more ease.

Contributor guide

Research direction
Research how macOS binary signing works and how to remove the signature (e.g., using codesign remove or similar) to get the unsigned binary for reproducible builds. Update the README section with clear steps.
Tech stack
None
Domain
backendtooling
Issue type
Documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
None
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
85