Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Post build hook signing #7408

Merged
merged 3 commits into from
Dec 7, 2022

Commits on Dec 6, 2022

  1. Whitespace lint

    endgame committed Dec 6, 2022
    Configuration menu
    Copy the full SHA
    237f502 View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2022

  1. docs: Use secret-key-files when demonstrating post-build-hooks

    The docs used to recommend calling `nix store sign` in a post-build
    hook, but on more recent versions of nix, this results in unsigned
    store paths being copied into binary caches. See
    NixOS#6960 for details.
    
    Instead, use the `secret-key-files` config option, which signs all
    locally-built derivations with the private key.
    endgame committed Dec 7, 2022
    Configuration menu
    Copy the full SHA
    a4a103d View commit details
    Browse the repository at this point in the history
  2. Update doc/manual/src/advanced-topics/post-build-hook.md

    Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
    endgame and fricklerhandwerk authored Dec 7, 2022
    Configuration menu
    Copy the full SHA
    ac76996 View commit details
    Browse the repository at this point in the history