diff options
| author | endgame <endgame@users.noreply.github.com> | 2022-12-07 22:55:02 +1000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-12-07 13:55:02 +0100 |
| commit | c710aa1abd51231ce45fc419de2e0e82c8957fbd (patch) | |
| tree | f98906a121c9a1a605992907e9ba5905e27711d0 /mk | |
| parent | 9c9768572b552b19c26e42142893cb42aef0fe3c (diff) | |
Post build hook signing (#7408)
* docs: Use secret-key-files when demonstrating post-build-hooks
The docs used to recommend calling `nix store sign` in a post-build
hook, but on more recent versions of nix, this results in unsigned
store paths being copied into binary caches. See
https://github.com/NixOS/nix/issues/6960 for details.
Instead, use the `secret-key-files` config option, which signs all
locally-built derivations with the private key.
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Diffstat (limited to 'mk')
0 files changed, 0 insertions, 0 deletions