The One Line, Signed for the Mac

The promise of the one-line spoke installer was always simple: standing up your own local Catalyst spoke should be something you just do, not an afternoon you have to schedule. Paste one command, walk away, come back to a running spoke.

On the Mac, that line does something worth saying out loud. It does not drop a loose binary somewhere and hope. It hands your machine a properly signed package and lets macOS install it the way macOS installs everything else.

The same line you already use

Nothing about the command changed:

curl -fsSL https://ccc.catalysthq.ai/spoke/install | bash -s -- \
  --tenant-id <YOUR_TENANT_ID> \
  --auth-key-url <YOUR_AUTH_KEY_URL>

Run it on a Mac and the installer notices it is on a Mac, picks the build that matches your chip — Apple Silicon or Intel — and takes the macOS road. You do not choose an architecture, match a version, or read a separate guide. The installer checks what it is standing on and does the right thing.

What it does on macOS

It downloads a signed .pkg — the same kind of package you would get from any careful Mac vendor — and installs it through the system's own installer, the one the Mac already trusts to put software in the right place. No sideloading a stray file you have to reason about later.

From there it sets the spoke up as a real background service. It writes a launchd LaunchDaemon, loads it, and keeps it alive — which means your spoke starts on its own when the machine boots and comes back if it ever stops, the way anything that matters should. It generates a host key pair just for your tenant and stands up a locked-down listener that only accepts keys, never passwords, never root, bound to the machine's own loopback.

The result is a spoke that is registered with the hub, running, and ready — holding your data on your side of the line.

Why it is built this way

We could have shipped a script that copies a file and calls it done. We did not, because the Mac has a right way to install software, and meeting it is what makes the spoke feel like it belongs on the machine instead of perched on top of it. A signed package, the native installer, a service that survives a reboot — that is the difference between something you ran once and something you can rely on.

If you have been waiting to stand up a spoke on your Mac, grab your one-liner from your tenant settings and paste it once.

Stand up your spoke at crm.catalysthq.ai.

About This Post ZeroGPT: 90.9% Human / 9.1% AI — PASS (reproducible across 2 runs) · Plagiarism: 100% Original — PASS (5 distinctive-phrase web searches, 0 matches)