Annoying warnings abour replacing existing signature after moving ~/.spack contents into code tree

[climbfuji]

Is your feature request related to a problem? Please describe.
After we move the contents of ~/.spack into the current code tree, I get these warnings when I run spack concretize:

/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/bin/gpg-error: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/bin/yat2m: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/lib/libgpg-error.0.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libassuan-2.5.6-z27suzptvelnavipmldx6dcntiwqmguq/lib/libassuan.0.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/dumpsexp: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/hmac256: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/mpicalc: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/lib/libgcrypt.20.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/bin/iconv: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/lib/libcharset.1.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/lib/libiconv.2.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libksba-1.6.4-lbfaarmpo2tupbezmqhfjvyspvwepv4r/lib/libksba.8.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/npth-1.6-yc7h5c7cp7mupstvh5wlujp3xqet3xxq/lib/libnpth.0.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/pinentry-1.2.1-rlo36pidutbjxxc3atooiwruaptfwmml/bin/pinentry-tty: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-m1/apple-clang-14.0.3/zlib-ng-2.1.3-hewnrm76ju4qcjaezxole5htrulkij25/lib/libz.1.2.13.zlib-ng.dylib: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg-agent: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg-card: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg-connect-agent: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg-wks-client: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpg-wks-server: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgconf: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgparsemail: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgscm: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgsm: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgsplit: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgtar: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/gpgv: replacing existing signature
/Users/heinzell/scratch/zlibng-modrev/spack-stack/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/gnupg-2.4.3-5cguax2vflgy2cwmt2ikvixtynommlmr/bin/kbxutil: replacing existing signature
...

Describe the solution you'd like
No such warnings

Additional context
n/a

[AlexanderRichert-NOAA]

@climbfuji can you try adding these to setup.sh and see if it clears things up?

export SPACK_DISABLE_LOCAL_CONFIG=true
export SPACK_USER_CONFIG_PATH=/dev/null

[climbfuji]

Thanks @AlexanderRichert-NOAA. I tried but with that spack external find --scope=system no longer works:

Configuring basic directory information ...
  ... script directory: /Users/heinzell/scratch/spack-stack-user-config-test/spack-stack/spack-ext/lib/jcsda-emc/spack-stack/stack
  ... base directory: /Users/heinzell/scratch/spack-stack-user-config-test/spack-stack/spack-ext/lib/jcsda-emc/spack-stack
  ... spack directory: /Users/heinzell/scratch/spack-stack-user-config-test/spack-stack/spack
Creating environment from command-line args
Successfully wrote environment at /Users/heinzell/scratch/spack-stack-user-config-test/spack-stack/envs/unified-env/spack.yaml

Checked user umask and found no issues (0022)

==> Created environment /Users/heinzell/scratch/spack-stack-user-config-test/spack-stack/envs/unified-env
usage: spack external find [-h] [--not-buildable] [--exclude EXCLUDE] [-p PATH] [--scope {defaults,system,site,user}[/PLATFORM] or env:ENVIRONMENT] [--all] [-t TAG] [-j JOBS] ...
spack external find: error: argument --scope: invalid choice: 'system' choose from:

Since that is by now so deeply enshrined in our user's brains (and mine!) I would had to change that unless it makes the process simpler.

[AlexanderRichert-NOAA]

Ah right. How about just the SPACK_USER_CONFIG_PATH setting (skip setting SPACK_DISABLE_LOCAL_CONFIG)?

[climbfuji]

With only SPACK_USER_CONFIG_PATH, I am still getting these warnings:

[unified-env] heinzell@JCSDA-L-18146:~/scratch/spack-stack-test-alex-stuff [brew-arch64]> spack concretize 2>&1 | tee log.concretize.unified-env.001
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/bin/gpg-error: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/bin/yat2m: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgpg-error-1.47-stcmj3wdfxrohn2a53ecvsfsxe7rzrn4/lib/libgpg-error.0.dylib: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libassuan-2.5.6-z27suzptvelnavipmldx6dcntiwqmguq/lib/libassuan.0.dylib: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/dumpsexp: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/hmac256: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/bin/mpicalc: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libgcrypt-1.10.2-if4uocx75kk6nc5vwvvuxq4dvaoljxkm/lib/libgcrypt.20.dylib: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/bin/iconv: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/lib/libcharset.1.dylib: replacing existing signature
/Users/heinzell/scratch/spack-stack-test-alex-stuff/spack/user_cache/bootstrap/store/darwin-ventura-aarch64/apple-clang-14.0.3/libiconv-1.17-nccvt7adwkq5anilrjspffdzl4hggon5/lib/libiconv.2.dylib: replacing existing signature
...

[AlexanderRichert-NOAA]

Googling for "replacing existing signature" it appears to be a MacOS thing, not a Spack thing. Somewhere there are settings that need to be removed/refreshed, but I don't know where (it's something to do with Apple's 3rd party developer system, but that's all I can figure out... maybe there's some certificates in your Keychain settings that can be reset..?). Unless you're able to identify what/where that is, can we either disable this on MacOS for now, or give it an optional flag which we will just use when deploying on the tier-1 systems?

[climbfuji]

I’ll turn this feature off for macOS (in setup.sh) - will do shortly. Thanks!

…

On Mar 13, 2024, at 2:40 PM, Alex Richert ***@***.***> wrote: Googling for "replacing existing signature" it appears to be a MacOS thing, not a Spack thing. Somewhere there are settings that need to be removed/refreshed, but I don't know where (it's something to do with Apple's 3rd party developer system, but that's all I can figure out... maybe there's some certificates <https://stackoverflow.com/questions/66427145/is-there-a-way-to-fix-error-replacing-existing-signaturewarning-unable-to-buil> in your Keychain settings <https://forums.developer.apple.com/forums/thread/119071> that can be reset <https://stackoverflow.com/questions/56889119/replace-existing-signature-error-when-deploying>..?). Unless you're able to identify what/where that is, can we either disable this on MacOS for now, or give it an optional flag which we will just use when deploying on the tier-1 systems? — Reply to this email directly, view it on GitHub <#1018 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AB5C2RIUQTGXDDJNGLKNAOLYYC2S5AVCNFSM6AAAAABEGME7QWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOJVG4ZDOOJTG4>. You are receiving this because you were mentioned.