voronind/nix
0
0
Fork 0
Code Issues 41 Pull requests Packages Projects Releases Wiki Activity

RemoteBuilder : Add auto-sign.

Browse source
This commit is contained in:
Dmitry Voronin 2024-03-10 08:00:13 +03:00
parent 37b315f536
commit 4bea28cc2a
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
module/RemoteBuilder.nix
View file

@ -9,10 +9,11 @@ in {
[[ -f "${keyPath}/private-key" ]] && exit
mkdir ${keyPath} || true
nix-store --generate-binary-cache-key "$HOSTNAME-1" "${keyPath}/private-key" "${keyPath}/public-key"
nix store sign --all -k "${keyPath}/private-key"
'';
};
# To apply: nix store sign --all -k /path/to/secret-key-file
nix.extraOptions = ''
secret-key-files = /root/.nixcache/private-key
secret-key-files = ${keyPath}/private-key
'';
}