In T114421#1698578, @greg wrote:

In T114421#1698345, @BGerstle-WMF wrote:

@JanZerebecki we'd still need to cut release builds, which we're currently prefering to execute on our own hardware

...due to signing with private keys we don't want to just throw around anywhere :)

I remember now, but would you even want WM CI integration for that? Because that would mean that the WM CI can build and sign any code it is instructed to, which means a few hundred people will have that ability.

If we were to want that what was the problem with making the OS X machine accessible to the WM CI Jenkins master? I think there were just open questions regarding who will be responsible for maintaining the machine. And how to make the network access happen, which is a question for SRE.