SQLPlus instantly killed when trying to run command

[JMogiel]

Hi there,
I think we have an issue with installing instantclient-arm64-sqlplus, possibly with instantclient-arm64 it self. I used sqlplus for a long time now and I needed to use thick mode in oracledb Python package, which requires to provide path to instantclient. I was surprised when I tried to use instantclient installed via Homebrew with message: "You use x86 not arm64, you need to use arm64" (or something like this). I check and that is right, I used non-arm version for past few months, but sqlplus worked, so I didn't noticed it.

So I wanted to uninstall Intel version and install ARM version of instantclient and instantclient-sqlplus. So I did it.

/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib

lib % ls
fips.dylib			libclntshcore.dylib		libocci.dylib.12.1
legacy.dylib			libclntshcore.dylib.12.1	libocci.dylib.18.1
libclntsh.dylib			libclntshcore.dylib.18.1	libocci.dylib.19.1
libclntsh.dylib.10.1		libclntshcore.dylib.19.1	libocci.dylib.20.1
libclntsh.dylib.11.1		libclntshcore.dylib.20.1	libocci.dylib.21.1
libclntsh.dylib.12.1		libclntshcore.dylib.21.1	libocci.dylib.22.1
libclntsh.dylib.18.1		libclntshcore.dylib.22.1	libocci.dylib.23.1
libclntsh.dylib.19.1		libclntshcore.dylib.23.1	libociei.dylib
libclntsh.dylib.20.1		libnnz.dylib			libocijdbc23.dylib
libclntsh.dylib.21.1		libocci.dylib			pkcs11.dylib
libclntsh.dylib.22.1		libocci.dylib.10.1
libclntsh.dylib.23.1		libocci.dylib.11.1

file $(which sqlplus)
/opt/homebrew/bin/sqlplus: Bourne-Again shell script text executable, ASCII text
file $(brew --prefix)/lib/libclntsh.dylib
/opt/homebrew/lib/libclntsh.dylib: Mach-O 64-bit dynamically linked shared library arm64

Everything looks good so far.

And then:

sqlplus -V
zsh: killed     sqlplus -V

I started to dig around it, trying to find an issue with my installation:

xattr -r /opt/homebrew/Cellar/instantclient-arm64-sqlplus | grep -v "^$"
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/INSTALL_RECEIPT.json: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/bin/sqlplus: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/bin: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/.brew/instantclient-arm64-sqlplus.rb: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/.brew: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/sbom.spdx.json: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/lib/libsqlplus.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/lib/libsqlplusic.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/lib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-sqlplus: com.apple.provenance

xattr -r /opt/homebrew/Cellar/instantclient-arm64-basic | grep -v "^$"
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/INSTALL_RECEIPT.json: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/.brew/instantclient-arm64-basic.rb: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/.brew: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/sbom.spdx.json: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libociei.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.22.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.10.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.21.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libnnz.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.21.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.19.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.21.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.19.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocijdbc23.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.22.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.22.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.10.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.19.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.12.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.18.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.20.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.23.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.11.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.23.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.12.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.18.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.11.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/legacy.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.23.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/fips.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntshcore.dylib.20.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.12.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libclntsh.dylib.18.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/libocci.dylib.20.1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib/pkcs11.dylib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1/lib: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic/23.3.0.23.09-1: com.apple.provenance
/opt/homebrew/Cellar/instantclient-arm64-basic: com.apple.provenance

Then I checked logs:

2025-05-20 17:05:35.145158+0200 0x8417     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3129, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:35.532646+0200 0x841c     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3130, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:35.733959+0200 0x8421     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3131, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:36.110651+0200 0x8425     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3132, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:36.338990+0200 0x842a     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3133, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:36.536269+0200 0x8431     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3134, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
2025-05-20 17:05:37.555687+0200 0x843b     Default     0x0                  0      0    kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 3135, /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
--------------------------------------------------------------------------------------------------------------------
Log      - Default:         34, Info:                1, Debug:             0, Error:          0, Fault:          0
Activity - Create:           0, Transition:          0, Actions:           0

Looks like for ARM64 we are missing some certificates which would satisfy Apple macOS or some other problem that I am not aware of. I used only command "brew" to install or uninstall packages, I didn't change any permissions, I didn't deleted anything via Finder.

[kaukas]

I am sorry but I do not use instantclient myself anymore. Please let me know if you (or anyone else) has figured out a solution. Thanks!

[mattdrees]

I ran into this too. I think the issue is the use of /usr/bin/install_name_tool in the formula; it looks like this modifies the binary, which breaks code-signing.

Comparing an oracle-downloaded sqlplus against the homebrew sqlplus binaries:

❯ codesign -v /opt/oracle/instantclient_23_3/sqlplus
❯ codesign -v /opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus
/opt/homebrew/Cellar/instantclient-arm64-sqlplus/23.3.0.23.09/libexec/sqlplus: invalid signature (code or signature have been modified)
In architecture: arm64

[ThoSap]

I have the same issue on macOS Sequoia 15.6.
@kaukas can you try to fix the usage of install_name_tool as @mattdrees suggested?
https://github.com/InstantClientTap/homebrew-instantclient/blob/master/Formula/instantclient-arm64-sqlplus.rb#L16
--- and all the other files that use this.

[ajaya]

find -L /opt/homebrew/Cellar/instantclient-arm64-* -type f \( -name '*.dylib*' -o -perm +111 \) \ -exec codesign --force --deep --sign - {} \;

This will fix.

@kaukas since you are not using Oracle anymore, do you prefer someone else take over development. I don't mind.