Cannot execute binary on Mac OS

[mehrenreich]

When trying to open graylog-project.darwin, I get this error message:

After making the appropriate settings in the security dialog, I get another error message:

[jalogisch]

downloading via wget is working proper:

 graylog-dev wget https://github.com/Graylog2/graylog-project-cli/releases/download/0.23.0/graylog-project.darwin
--2020-07-21 15:36:32--  https://github.com/Graylog2/graylog-project-cli/releases/download/0.23.0/graylog-project.darwin
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/87558232/a598a000-a765-11ea-87ce-30893f214742?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200721%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200721T133632Z&X-Amz-Expires=300&X-Amz-Signature=6d5c1ea678b51d1e0a6e30751bc823b67415de8281b5ac2cabcd69c331f6842c&X-Amz-SignedHeaders=host&actor_id=0&repo_id=87558232&response-content-disposition=attachment%3B%20filename%3Dgraylog-project.darwin&response-content-type=application%2Foctet-stream [following]
--2020-07-21 15:36:32--  https://github-production-release-asset-2e65be.s3.amazonaws.com/87558232/a598a000-a765-11ea-87ce-30893f214742?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200721%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200721T133632Z&X-Amz-Expires=300&X-Amz-Signature=6d5c1ea678b51d1e0a6e30751bc823b67415de8281b5ac2cabcd69c331f6842c&X-Amz-SignedHeaders=host&actor_id=0&repo_id=87558232&response-content-disposition=attachment%3B%20filename%3Dgraylog-project.darwin&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.160.219
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.160.219|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 16245232 (15M) [application/octet-stream]
Saving to: ‘graylog-project.darwin’

graylog-project.darwin      100%[===========================================>]  15,49M  9,37MB/s    in 1,7s

2020-07-21 15:36:34 (9,37 MB/s) - ‘graylog-project.darwin’ saved [16245232/16245232]

 graylog-dev ls
graylog-project.darwin
 graylog-dev chmod +x graylog-project.darwin
 graylog-dev ./graylog-project.darwin

CLI tool to manage a graylog-project setup

Some command line options can be configured with a yaml config file.

Configuration options:

- repository-root
- checkout.update-repos (see checkout command)
- checkout.shallow-clone (see checkout command)

Example config file:

  ---
  repository-root: "../gpc"

Configuration file lookup order

1. $PWD/.graylog-project-cli.yml
2. $HOME/.graylog-project-cli.yml

Environment variables:

- GPC_REPOSITORY_ROOT: can be used instead of the "repository-root" command line flag

Example usage:

  $ graylog-project checkout manifests/master.json

  $ graylog-project npm install

  $ graylog-project status


Version:      0.23.0
Build date:   2020-06-05T17:40:01+0000
Git revision: 7326320

Usage:
  graylog-project-cli [command]

Available Commands:
  apply-manifest          Apply the given manifest
  apply-manifest-generate Generate apply-manifest from the given manifest
  bootstrap               Clone and setup graylog-project repository
  checkout                Update project for the given manifest
  exec                    Execute arbitrary commands
  git                     Run git commands
  github                  GitHub management
  graylog-version         Sets the graylog version
  help                    Help about any command
  idea                    Commands for IntelliJ IDEA
  maven-parent            Show or modify maven parent
  maven-property          Gets or sets a maven property
  npm                     Run npm commands
  npm-clean               Cleanup npm/yarn related state
  npm-version             Set package.json version
  regenerate              Regenerate files for the current checkout
  run                     Run Graylog server, MongoDB , Elasticsearch and other services
  status                  Overview of the current project state
  update                  Update all repositories for the current manifest
  version                 Display version
  yarn                    Run yarn commands

Flags:
      --config string             config file
  -D, --debug                     enable debug output (default: false)
  -U, --disable-update-check      disable checking for graylog-project-cli updates
      --force-https-repos         convert all git@github.com:... repository URLs to https://github.com/...
  -h, --help                      help for graylog-project-cli
      --logger-prefix string      output logger prefix
      --repository-root string    Git repository root (default "../graylog-project-repos")
  -M, --selected-modules string   apply command to given modules (comma separated)
  -v, --verbose                   enable verbose output (default: false)

Use "graylog-project-cli [command] --help" for more information about a command.

[mehrenreich]

This is weird. Downloading with wget works, the resulting file indeed is the same:

❯ shasum -a256 ./graylog-project.darwin ~/Downloads/graylog-project.darwin
9d1d11132f9d5a493aced4d4a779d223bade90e6068bd16a0534bf5c437a49c1  ./graylog-project.darwin
9d1d11132f9d5a493aced4d4a779d223bade90e6068bd16a0534bf5c437a49c1  /Users/mike/Downloads/graylog-project.darwin
❯ diff -q ./graylog-project.darwin ~/Downloads/graylog-project.darwin
❯ echo $?
0

Downloaded the file again using Chrome and Safari, same error as posted above.

[malcyon]

There's a similar issue with Terraform here:

hashicorp/terraform#23033

We'd have to go through Apple's notarization process to fix it:

https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution