Howdy, Trying to get notarization working using a M1 build host and fleetdm docker image. This is the docker command I run:

docker run --env-file .env --v "{PWD} --platform linux/amd64 fleetdm/fleetctl package --type=pkg --fleet-url=<https://redacted.tld> --enroll-secret=<> --sign-identity <> --notarize --fleet-desktop

This produces the following error:

productsign: executable file not found in $PATH

. I'm sure I'm making some trivial mistake, any thoughts appreciated, I know very little about OSX notarization. 🙏

Hey @Daniel Lidberg. The

productsign

package used for the signing and notarization isn't present in the Docker Container. Building a signed package should be done natively rather than with Docker.

make sure you're building on macOS with XCode installed (includes

productsign

)

@Kathy Satterlee that makes a ton of sense now (I thought there was some magic sauce in the docker) thank you for clearing things up 🙂 . I'll try to build and sign the package directly instead. 🙏

What error did you get when signing with

fleetctl

natively?

There's some setup involved which needs app store connect creds, have you seen this? https://fleetdm.com/docs/using-fleet/fleetd#macos-signing-notarization

What error did you get when signing with fleetctl natively?

See screenshot, this is how I ran the fleetctl command 🙏

AC_USERNAME=<my_devid> AC_PASSWORD=<my generated app pass> AC_TEAM_ID=<our org id> ./fleetctl package --type=pkg --fleet-url=<http://fleet.example.com|fleet.example.com> --enroll-secret=<> --sign-identity <developer id installer id> --notarize

are you still seeing the same

productsign

error?

Unfortunately yes, will try and dig further next week but this week it's all about signing msi 😉