Docker Desktop 4.38 on macOS still giving malware bug

Docker Desktop
1

I have started getting this pop-up issue with the latest 4.38.0 version. I have followed the previous suggested fixes in closed tickets but nothing has worked. I have also tried rebooting and following the steps to disable SIP in recovery mode. Upon reenabling this is still comes back even if I delete uninstall and Docker app from the trash.
My latest attempt was to install the newest Docker via the command line with this also not fixing the bug.

MacOs Sonoma M1

1 Like
2

Please, share what you did exactly. Otherwise you could miss anything and someone should tell you every single step again until they find what you did or didn’t do.

1 Like
3

I did the Workaround solution listed here:
https://github.com/docker/for-mac/issues/7520#issuecomment-2578291149

I have tried moving the app to trash and then deleting from trash. Then downloading the latest version from here
https://docs.docker.com/desktop/setup/install/mac-install/
and both installing via the normal way to drag the installer to the App folder which didn’t work so then tried installing via the command line with this:

sudo hdiutil attach Docker.dmg
sudo /Volumes/Docker/Docker.app/Contents/MacOS/install
sudo hdiutil detach /Volumes/Docker

I have the gone down every possible solution ChatGPT gave me:

2. Remove Quarantine Attribute

macOS may have flagged Docker as unsafe due to the quarantine attribute. To remove it:

  1. Open Terminal.
  2. Run this command:
xattr -d com.apple.quarantine /Applications/Docker.app
  1. Try launching Docker again.

3. Check & Reinstall Docker

If the issue persists, you may need to reinstall Docker properly:

  1. *Completely remove Docker
sudo rm -rf /Applications/Docker.app
rm -rf ~/Library/Containers/com.docker.*
rm -rf ~/.docker
  1. Download the latest version from Docker’s official website.

After none of that worked it said to do this:

Disable SIP Temporarily (If Option 1 Fails)

If the error persists, you may need to temporarily disable SIP to fix it.

Step 1: Boot into macOS Recovery Mode

  1. Intel Mac: Restart and hold Command (⌘) + R until you see the Apple logo.
  2. Apple Silicon (M1/M2/M3):
    • Shut down your Mac completely.
    • Hold the Power button until you see “Loading startup options.”
    • Select Options > Continue to enter macOS Recovery.

Step 2: Disable SIP Temporarily

  1. Open Terminal from the menu bar (Utilities > Terminal).

  2. Run:

    csrutil disable

  3. Restart your Mac normally.

Step 3: Remove Quarantine Flag

Now, try running:

sudo xattr -cr /Applications/Docker.app

Then restart Docker.

Step 4: Re-Enable SIP (For Security)

Once Docker is working correctly, re-enable SIP for security:

  1. Boot into macOS Recovery Mode again.

  2. Open Terminal and run:

    csrutil enable

  3. Restart your Mac normally.

Which did nothing. I now have Docker running again but still have pop-up constantly in my way while trying to work.

4

It sounds like a persistent issue with Docker on your MacOS Sonoma M1. Since you’ve tried several fixes, here are a couple of additional steps you could try:

  1. Clear Docker’s system files manually: After uninstalling, make sure to delete Docker-related files in /Library/Application Support/, ~/Library/Containers/, and /Library/Preferences/.

  2. Reinstall Rosetta 2: Since you’re on an M1 chip, Docker might still be relying on Rosetta. Run sudo softwareupdate --install-rosetta to reinstall it.

If the issue persists, you might want to check for any system-specific bugs with the M1 chip or try downgrading Docker to an earlier version until a fix is released.

5

Thank you. After trying and needing to fully shut it down via activity monitor, which I had tried many times before with no success, it finally made the pop-up go away! I will try the Rosetta reinstall if it comes back.

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.