mirror of
https://github.com/NixOS/nix
synced 2025-06-29 02:11:15 +02:00
Allow substituters to be marked as trusted
This is needed by nixos-install, which uses the Nix store on the installation CD as a substituter. We don't want to disable signature checking entirely because substitutes from cache.nixos.org should still be checked. So now we can pas "local?trusted=1" to mark only the Nix store in /nix as not requiring signatures. Fixes #1819.
This commit is contained in:
parent
2175eee9fe
commit
bb1d046f5c
2 changed files with 7 additions and 2 deletions
|
@ -248,6 +248,8 @@ public:
|
|||
|
||||
const Setting<int> pathInfoCacheSize{this, 65536, "path-info-cache-size", "size of the in-memory store path information cache"};
|
||||
|
||||
const Setting<bool> isTrusted{this, false, "trusted", "whether paths from this store can be used as substitutes even when they lack trusted signatures"};
|
||||
|
||||
protected:
|
||||
|
||||
struct State
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue