big sur requires qemu to be code-signed

[eyberg]

https://www.reddit.com/r/VFIO/comments/kdhgni/qemu_hvf_support_for_mac_os_x_bug_sur_hv_error/

install should prompt the user to run the following if on big sur or later

codesign -s - --entitlements app.entitlements --force qemu-system-x86_64

app.entitlement:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.hypervisor</key>
    <true/>
</dict>
</plist>

[eyberg]

I think i just ran into this (after updating to big sur) but strange that I didn't codesign before, it's not showing entitlements - and it was spurious - doesn't seem to be easily reproducible.

qemu-system-x86_64: Error: HV_ERROR
signal: abort trap

➜  ~ which qemu-system-x86_64
➜  ~ codesign -d --entitlements :-  /usr/local/bin/qemu-system-x86_64
/usr/local/bin/qemu-system-x86_64: code object is not signed at all

[joshuaquek]

Running into the same issue too, any fix for this on Ops?

[eyberg]

@joshuaquek can you run what I pasted in the top comment here? that'll codesign it manually - we just haven't added it to the install script yet

[joshuaquek]

Thanks @eyberg !
I followed this guide (similar to what you did): https://www.arthurkoziel.com/qemu-on-macos-big-sur/

and now it works!

[joshuaquek]

I think we can close this issue

[eyberg]

glad to hear it works, i'm going to keep this open until the install script is updated here https://github.com/nanovms/ops/blob/master/install.sh

[joshuaquek]

thanks @eyberg !!! 🙏🏼🙏🏼🙏🏼