Imagine downloading myapp.bin from a website. You chmod +x myapp.bin and run ./myapp.bin . It works. But what did it actually do? Did it copy files to /usr/local/bin ? Did it create a config folder in ~/.config ? Does it start at boot? How do you remove it?
#DevOps #SysAdmin #Linux #Packaging #InfrastructureAsCode bin to pkg better
A .pkg that is not signed and notarized will trigger a “malicious software” warning when a user tries to install it on modern versions of macOS (10.15 Catalina and later). To avoid that warning and give your users a safe, seamless experience, you must follow Apple’s security requirements. Imagine downloading myapp
