docs

metalbear-co · Jul 11, 2024 · 7069b78 · 7069b78
1 parent 7062633
commit 7069b78
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/mirrord-schema.json b/mirrord-schema.json
@@ -617,20 +617,28 @@
       "type": "object",
       "properties": {
         "readlink": {
-          "title": "_experimental_ readlink {#fexperimental-readlink}",
+          "title": "_experimental_ readlink {#experimental-readlink}",
           "description": "Enables the `readlink` hook.",
           "type": [
             "boolean",
             "null"
           ]
         },
         "tcp_ping4_mock": {
-          "title": "_experimental_ tcp_ping4_mock {#fexperimental-tcp_ping4_mock}",
+          "title": "_experimental_ tcp_ping4_mock {#experimental-tcp_ping4_mock}",
           "description": "<https://github.com/metalbear-co/mirrord/issues/2421#issuecomment-2093200904>",
           "type": [
             "boolean",
             "null"
           ]
+        },
+        "trust_any_certificate": {
+          "title": "_experimental_ trust_any_certificate {#experimental-trust_any_certificate}",
+          "description": "Enables trusting any certificate on macOS, useful for https://github.com/golang/go/issues/51991#issuecomment-2059588252",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "additionalProperties": false

diff --git a/mirrord/layer/src/lib.rs b/mirrord/layer/src/lib.rs
@@ -476,6 +476,7 @@ fn sip_only_layer_start(mut config: LayerConfig, patch_binaries: Vec<String>) {
 fn enable_hooks(state: &LayerSetup) {
     let enabled_file_ops = state.fs_config().is_active();
     let enabled_remote_dns = state.remote_dns_enabled();
+    #[cfg(target_os = "macos")]
     let patch_binaries = state.sip_binaries();
 
     let mut hook_manager = HookManager::default();