wroclaw-git-backups/nix
1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2025-06-25 02:21:16 +02:00
Code Activity

Allow to sign path as unprivileged user

Browse source 
User can now sign path as unprivileged/allowed user

refs #1708
This commit is contained in:
Jean-François Roche 2023-06-27 12:01:08 +02:00
parent 8e770dac9f
commit 80c9259756
3 changed files with 18 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
tests/nixos/authorization.nix
View file

@ -75,5 +75,20 @@
su --login bob -c '(! nix-store --verify --repair 2>&1)' | tee diag 1>&2
grep -F "you are not privileged to repair paths" diag
""")
machine.succeed("""
set -x
su --login mallory -c '
nix-store --generate-binary-cache-key cache1.example.org sk1 pk1
(! nix store sign --key-file sk1 ${pathFour} 2>&1)' | tee diag 1>&2
grep -F "cannot open connection to remote store 'daemon'" diag
""")
machine.succeed("""
su --login bob -c '
nix-store --generate-binary-cache-key cache1.example.org sk1 pk1
nix store sign --key-file sk1 ${pathFour}
'
""")
'';
}