Merge pull request paritytech#306 from subspace/macos-12-fix

macOS 12 signing fix

Author: ImmaZoni

.github/workflows/Entitlements.plist

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <!-- required for incoming connections -->
+    <key>com.apple.security.network.server</key>
+    <true/>
+
+    <!-- required for outgoing connections -->
+    <key>com.apple.security.network.client</key>
+    <true/>
+
+    <!-- required for read/write access to files -->
+    <key>com.apple.security.files.user-selected.read-write</key>
+    <true/>
+
+    <!-- without this, it is crashing during sync/plot, idk why -->
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+</dict>
+</plist>

.github/workflows/snapshot-build.yml

@@ -155,9 +155,9 @@ jobs:
           security import certificate.p12 -k build.keychain -P "${{ secrets.MACOS_CERTIFICATE_PW }}" -T /usr/bin/codesign
           security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${{ secrets.MACOS_CERTIFICATE_PW }}" build.keychain
           echo "Signing farmer"
-          codesign --force --options=runtime -s "${{ secrets.MACOS_IDENTITY }}" --timestamp target/production/subspace-farmer
+          codesign --force --options=runtime --entitlements .github/workflows/Entitlements.plist -s "${{ secrets.MACOS_IDENTITY }}" --timestamp target/production/subspace-farmer
           echo "Signing node"
-          codesign --force --options=runtime -s "${{ secrets.MACOS_IDENTITY }}" --timestamp target/production/subspace-node
+          codesign --force --options=runtime --entitlements .github/workflows/Entitlements.plist -s "${{ secrets.MACOS_IDENTITY }}" --timestamp target/production/subspace-node
           echo "Creating an archive"
           mkdir target/production/macos-binaries
           cp target/production/subspace-farmer target/production/subspace-node target/production/macos-binaries