diff options
| author | Quentin Dufour <quentin@deuxfleurs.fr> | 2021-11-10 10:01:48 +0100 |
|---|---|---|
| committer | Quentin Dufour <quentin@deuxfleurs.fr> | 2021-11-10 10:02:22 +0100 |
| commit | 323514be15f3e0790e2bfdf4b78aff0e13f10ceb (patch) | |
| tree | ad318a32f667e3af2db3b7ec46d973d13ae46c55 /doc/book/src/development/miscellaneous_notes.md | |
| parent | ad8d5139cfdc923d0b836202dbf0ca4155b27acb (diff) | |
| download | garage-323514be15f3e0790e2bfdf4b78aff0e13f10ceb.tar.gz garage-323514be15f3e0790e2bfdf4b78aff0e13f10ceb.zip | |
Documentation for Nix binary cache
Diffstat (limited to 'doc/book/src/development/miscellaneous_notes.md')
| -rw-r--r-- | doc/book/src/development/miscellaneous_notes.md | 36 |
1 files changed, 0 insertions, 36 deletions
diff --git a/doc/book/src/development/miscellaneous_notes.md b/doc/book/src/development/miscellaneous_notes.md index c259cba1..1adc5744 100644 --- a/doc/book/src/development/miscellaneous_notes.md +++ b/doc/book/src/development/miscellaneous_notes.md @@ -13,42 +13,6 @@ We have a simple [PR on cargo2nix](https://github.com/cargo2nix/cargo2nix/pull/2 Nix has no armv7 + musl toolchains but armv7l is backward compatible with armv6l. -Signing keys are generated with: - -``` -nix-store --generate-binary-cache-key nix.web.deuxfleurs.fr cache-priv-key.pem cache-pub-key.pem -``` - -We copy the secret key in our nix folder: - -``` -cp cache-priv-key.pem /etc/nix/signing-key.sec -``` - -Manually sign - -We can sign the whole store with: - -``` -nix sign-paths --all -k /etc/nix/signing-key.sec -``` - -Or simply the current package and its dependencies with: - -``` -nix sign-paths --recursive -k /etc/nix/signing-key.sec -``` - -Setting a key in `nix.conf` will do the signature at build time automatically without additional commands, edit the `nix.conf` of your builder: - -```toml -secret-key-files = /etc/nix/signing-key.sec -max-jobs = auto -cores = 8 -``` - -Now you are ready to build your packages: - ```bash cat > $HOME/.awsrc <<EOF export AWS_ACCESS_KEY_ID="xxx" |