Update code signing instructions (#7950)

Added context about update channel to note about orbit's install path.
This commit is contained in:
Katheryn Satterlee 2022-10-14 10:19:02 -05:00 committed by GitHub
parent 03096ee546
commit 412375b21e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -245,7 +245,7 @@ On a system with osquery installed via the Fleet osquery installer (Orbit), obta
`CodeRequirement` of Orbit by running:
```
codesign -dr - /opt/orbit/bin/orbit/macos/edge/orbit
codesign -dr - /opt/orbit/bin/orbit/macos/stable/orbit
```
The output should be similar or identical to:
@ -255,7 +255,7 @@ Executable=/opt/orbit/bin/orbit/macos/edge/orbit
designated => identifier "com.fleetdm.orbit" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "8VBZ3948LU"
```
> **NOTE:** Depending on the version of `fleetctl` used to package and install Orbit, the executable path may differ.
> **NOTE:** Depending on the version of `fleetctl` used to package and install Orbit, as well as the update channel you've specified, the executable path may differ.
> Fleetctl versions <= 4.13.2 would install orbit to `/var/lib/orbit` instead of `/opt/orbit`.
Note down the **executable path** and the entire **identifier**.