From 323514be15f3e0790e2bfdf4b78aff0e13f10ceb Mon Sep 17 00:00:00 2001 From: Quentin Dufour Date: Wed, 10 Nov 2021 10:01:48 +0100 Subject: Documentation for Nix binary cache --- doc/book/src/development/miscellaneous_notes.md | 36 ------------------------- 1 file changed, 36 deletions(-) (limited to 'doc/book/src/development') diff --git a/doc/book/src/development/miscellaneous_notes.md b/doc/book/src/development/miscellaneous_notes.md index c259cba1..1adc5744 100644 --- a/doc/book/src/development/miscellaneous_notes.md +++ b/doc/book/src/development/miscellaneous_notes.md @@ -13,42 +13,6 @@ We have a simple [PR on cargo2nix](https://github.com/cargo2nix/cargo2nix/pull/2 Nix has no armv7 + musl toolchains but armv7l is backward compatible with armv6l. -Signing keys are generated with: - -``` -nix-store --generate-binary-cache-key nix.web.deuxfleurs.fr cache-priv-key.pem cache-pub-key.pem -``` - -We copy the secret key in our nix folder: - -``` -cp cache-priv-key.pem /etc/nix/signing-key.sec -``` - -Manually sign - -We can sign the whole store with: - -``` -nix sign-paths --all -k /etc/nix/signing-key.sec -``` - -Or simply the current package and its dependencies with: - -``` -nix sign-paths --recursive -k /etc/nix/signing-key.sec -``` - -Setting a key in `nix.conf` will do the signature at build time automatically without additional commands, edit the `nix.conf` of your builder: - -```toml -secret-key-files = /etc/nix/signing-key.sec -max-jobs = auto -cores = 8 -``` - -Now you are ready to build your packages: - ```bash cat > $HOME/.awsrc <