Bug 1993109 - CNV MacOS Client not signed
Summary: CNV MacOS Client not signed
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Container Native Virtualization (CNV)
Classification: Red Hat
Component: Virtualization
Version: 4.8.2
Hardware: Unspecified
OS: Mac OS
high
medium
Target Milestone: ---
: 4.11.0
Assignee: sgott
QA Contact: Ying Cui
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-08-12 12:06 UTC by Timothy Rees
Modified: 2023-11-13 08:18 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-09-14 19:28:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker CLOUDDST-8726 0 None None None 2021-09-22 20:14:35 UTC
Red Hat Issue Tracker CNV-13524 0 None None None 2023-11-13 08:18:36 UTC
Red Hat Product Errata RHSA-2022:6526 0 None None None 2022-09-14 19:28:30 UTC

Description Timothy Rees 2021-08-12 12:06:14 UTC
Description of problem:

The MacOS CNV client on the customer portal is not signed.  This results in users having to go into the security settings on MacOS to permit the binary to run unsigned.  For users intending to run the binary on managed devices, they may not have this ability.


Version-Release number of selected component (if applicable):

virtctl version
Client Version: version.Info{GitVersion:"v0.41.0-65-g7221a5685", GitCommit:"7221a5685fbcfe91ca19a1d69edfa4e627672797", GitTreeState:"clean", BuildDate:"2021-06-30T17:31:14Z", GoVersion:"go1.15.13", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{GitVersion:"v0.41.0-65-g7221a5685", GitCommit:"7221a5685fbcfe91ca19a1d69edfa4e627672797", GitTreeState:"clean", BuildDate:"2021-06-30T18:13:45Z", GoVersion:"go1.15.13", Compiler:"gc", Platform:"linux/amd64"}

MacOS Big Sur 11.4

How reproducible:

100%

Steps to Reproduce:
1. Download client from customer portal; https://access.redhat.com/downloads/content/473/ver=4.8/rhel---8/4.8/x86_64/product-software
2. Run client
3.

Actual results:

Binary will not run due to being unsigned, model pops up on OS to state this.


Expected results:

Binary is signed and runs.

Additional info:

Comment 5 Kedar Bidarkar 2022-05-10 09:53:50 UTC
We think this bug could be already fixed, we just need to check this out now.

Comment 6 Ying Cui 2022-06-30 08:50:29 UTC
VERIFIED.

Test env.:
macOS Monterey Version 12.4(21F79)

Test Steps:
1. Download client from customer portal:
for example:
https://access.redhat.com/downloads/content/473/ver=4.8/rhel---8/4.8/x86_64/product-software
or
https://access.redhat.com/downloads/content/473/ver=4.10/rhel---8/V4.10.2/x86_64/product-software
2. Run client 

# Note: the following is from client virtctl-4.10.2-mac.zip
$ ./virtctl 
Available Commands:
  addvolume         add a volume to a running VM
  completion        generate the autocompletion script for the specified shell
  console           Connect to a console of a virtual machine instance.
  expose            Expose a virtual machine instance, virtual machine, or virtual machine instance replica set as a new service.
  fslist            Return full list of filesystems available on the guest machine.
  guestfs           Start a shell into the libguestfs pod
  guestosinfo       Return guest agent info about operating system.
  help              Help about any command
  image-upload      Upload a VM image to a DataVolume/PersistentVolumeClaim.
  migrate           Migrate a virtual machine.
  pause             Pause a virtual machine
  permitted-devices List the permitted devices for vmis.
  port-forward      Forward local ports to a virtualmachine or virtualmachineinstance.
  removevolume      remove a volume from a running VM
  restart           Restart a virtual machine.
  soft-reboot       Soft reboot a virtual machine instance
  ssh               Open a SSH connection to a virtual machine instance.
  start             Start a virtual machine.
  stop              Stop a virtual machine.
  unpause           Unpause a virtual machine
  usbredir          Redirect a usb device to a virtual machine instance.
  userlist          Return full list of logged in users on the guest machine.
  version           Print the client and server version information.
  vnc               Open a vnc connection to a virtual machine instance.

Use "virtctl <command> --help" for more information about a given command.
Use "virtctl options" for a list of global command-line options (applies to all commands).

$ ./virtctl version
Client Version: version.Info{GitVersion:"v0.49.0-163-gb0553b0f5", GitCommit:"b0553b0f5e5c7c091e7107382073bba7d9be3f43", GitTreeState:"clean", BuildDate:"2022-05-19T17:50:41Z", GoVersion:"go1.16.12", Compiler:"gc", Platform:"darwin/amd64"}


Running client works well, there is no pop up messages. Thanks.

Comment 9 errata-xmlrpc 2022-09-14 19:28:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Virtualization 4.11.0 Images security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:6526


Note You need to log in before you can comment on or make changes to this bug.