diff options
| author | Eelco Dolstra <edolstra@gmail.com> | 2018-02-05 18:08:30 +0100 |
|---|---|---|
| committer | Eelco Dolstra <edolstra@gmail.com> | 2018-02-05 18:08:30 +0100 |
| commit | bb1d046f5c37a01ee85fc30d4602e8be8213eb84 (patch) | |
| tree | cef64fac8b398fb9cf16ee619b190a5226ceeb92 /src/libstore/store-api.hh | |
| parent | 2175eee9fec07dea32e07471946d26a242a07760 (diff) | |
Allow substituters to be marked as trusted
This is needed by nixos-install, which uses the Nix store on the
installation CD as a substituter. We don't want to disable signature
checking entirely because substitutes from cache.nixos.org should
still be checked. So now we can pas "local?trusted=1" to mark only the
Nix store in /nix as not requiring signatures.
Fixes #1819.
Diffstat (limited to 'src/libstore/store-api.hh')
| -rw-r--r-- | src/libstore/store-api.hh | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/libstore/store-api.hh b/src/libstore/store-api.hh index 70f23e1fc..aa83c2ded 100644 --- a/src/libstore/store-api.hh +++ b/src/libstore/store-api.hh @@ -248,6 +248,8 @@ public: const Setting<int> pathInfoCacheSize{this, 65536, "path-info-cache-size", "size of the in-memory store path information cache"}; + const Setting<bool> isTrusted{this, false, "trusted", "whether paths from this store can be used as substitutes even when they lack trusted signatures"}; + protected: struct State |