Signing issues on OSX

[samoht]

Due to golang/go#11887 the notary binary, when signed, will not run on OSX. We currently workaround the issue by rebuilding the application with striped dwarf symbols:

djs55@31e4b19

Would be great to have a proper solution integrated upstream.

/cc @justincormack and @djs55

[endophage]

Just curious, which version of Go are you using? That linked issue seems to indicate the solution you're using ceased working on 1.5.2 and 1.6.

Definitely want to work out a good way to fix this. I was talking to the Yubico guys about how we might go about dropping to cgo requirement (we'd have to write a Go integration from the ground up, probably against PIV rather than PKCS11), but I haven't had any time to look into it.

[justincormack]

Fairly sure we are compiling with 1.6; the solution still works, that is what we ship with docker for mac.

I don't think always stripping the dwarf is a problem for other platforms, can do a PR for that.

A non cgo version would be nice, but it is quite a bit of work I would imagine...

[dmp42]

Doesn't the last comment on that go ticket suggest the latest clang version fixes the issue? (clang-703.0.29)

[justincormack]

The comments on the issues don't correspond much to our experience, but I will test again on a fully updated system.

[endophage]

Closing due to inactivity and afaik, fixes and workaround in place.