wroclaw-git-backups/nix
1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2025-06-24 22:11:15 +02:00
Code Activity

doc/rl-next: add multiple-signatures

Browse source
This commit is contained in:
Jörg Thalheim 2025-05-14 23:16:59 +02:00
parent cdb332990e
commit 5ca242018d
1 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
doc/manual/rl-next/multiple-signatures.md Normal file
View file

@ -0,0 +1,15 @@
---
synopsis: "Multiple signatures support in store urls"
issues:
prs: [12976]
---
Added support for a `secretKeyFiles` URI parameter in Nix store URIs, allowing multiple signing key files to be specified as a comma-separated list.
This enables signing paths with multiple keys. This helps with [RFC #149](https://github.com/NixOS/rfcs/pull/149) to enable binary cache key rotation in the NixOS infra.
Example usage:
```bash
nix copy --to "file:///tmp/store?secret-keys=/tmp/key1,/tmp/key2" \
"$(nix build --print-out-paths nixpkgs#hello)"
```