grahamc/hydra2 - Change AJVEJENFDMRMPLDWK5OCUIKLS7APCCXDVID5SQMVLY3CIJMYPW3QC

Allow Hydra's binary cache to be signed

This requires adding the following to hydra.conf:

binary_cache_key_name = <key-name> binary_cache_private_key_file = <path-to-private-key>

e.g.

binary_cache_key_name = hydra.nixos.org-1 binary_cache_private_key_file = /home/hydra/cache-key.sec

Created by Eelco Dolstra on January 8, 2014

AJVEJENFDMRMPLDWK5OCUIKLS7APCCXDVID5SQMVLY3CIJMYPW3QC

Dependencies

[2] IDT3SO3P52TCB4IWV3LYZJ5JLJACNQ26X65VXUTUD227PRE2UZUAC

In channels

main

Change contents

Insertion in src/lib/Hydra/View/NARInfo.pm at line 7 [2.669]
[2.778]
[2.778]
```
use Nix::Crypto;
```

Insertion in src/lib/Hydra/View/NARInfo.pm at line 31 [2.669]

[2.1654]

[2.1654]

    }
    # Optionally, sign the NAR info file we just created.
    my $privateKeyFile = $c->config->{binary_cache_private_key_file};
    my $keyName = $c->config->{binary_cache_key_name};
    if (defined $privateKeyFile && defined $keyName) {
        my $sig = signString($privateKeyFile, $info);
        $info .= "Signature: 1;$keyName;$sig\n";