Open
Description
Is your feature request related to a problem? Please describe.
Currently, when rendering a NAR via NARInfo.pm
, Hydra will sign autonomously the path by using Nix Perl bindings. This feature is undesirable because it creates a tightly coupling to the secret key inside of Hydra and prevent from using more advanced way of signing like remote signing in NixOS/nix#9076.
Describe the solution you'd like
It seems better to me to move this to Nix and remove this feature whatsover.
Describe alternatives you've considered
Implementing remote signing in the Nix perl bindings and creating a general but fallible signer function attached on abstract stores.
Metadata
Metadata
Assignees
Labels
No labels