diff --git a/mirrord-schema.json b/mirrord-schema.json index 5897114ddeb..3e8611d6403 100644 --- a/mirrord-schema.json +++ b/mirrord-schema.json @@ -617,7 +617,7 @@ "type": "object", "properties": { "readlink": { - "title": "_experimental_ readlink {#fexperimental-readlink}", + "title": "_experimental_ readlink {#experimental-readlink}", "description": "Enables the `readlink` hook.", "type": [ "boolean", @@ -625,12 +625,20 @@ ] }, "tcp_ping4_mock": { - "title": "_experimental_ tcp_ping4_mock {#fexperimental-tcp_ping4_mock}", + "title": "_experimental_ tcp_ping4_mock {#experimental-tcp_ping4_mock}", "description": "", "type": [ "boolean", "null" ] + }, + "trust_any_certificate": { + "title": "_experimental_ trust_any_certificate {#experimental-trust_any_certificate}", + "description": "Enables trusting any certificate on macOS, useful for https://github.com/golang/go/issues/51991#issuecomment-2059588252", + "type": [ + "boolean", + "null" + ] } }, "additionalProperties": false diff --git a/mirrord/layer/src/lib.rs b/mirrord/layer/src/lib.rs index 8865f91d140..07135a0b99f 100644 --- a/mirrord/layer/src/lib.rs +++ b/mirrord/layer/src/lib.rs @@ -476,6 +476,7 @@ fn sip_only_layer_start(mut config: LayerConfig, patch_binaries: Vec) { fn enable_hooks(state: &LayerSetup) { let enabled_file_ops = state.fs_config().is_active(); let enabled_remote_dns = state.remote_dns_enabled(); + #[cfg(target_os = "macos")] let patch_binaries = state.sip_binaries(); let mut hook_manager = HookManager::default();