Skip to content

Remove NARInfo.pm autonomous signature #1331

Open
@RaitoBezarius

Description

@RaitoBezarius

Is your feature request related to a problem? Please describe.

Currently, when rendering a NAR via NARInfo.pm, Hydra will sign autonomously the path by using Nix Perl bindings. This feature is undesirable because it creates a tightly coupling to the secret key inside of Hydra and prevent from using more advanced way of signing like remote signing in NixOS/nix#9076.

Describe the solution you'd like

It seems better to me to move this to Nix and remove this feature whatsover.

Describe alternatives you've considered

Implementing remote signing in the Nix perl bindings and creating a general but fallible signer function attached on abstract stores.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions