Hi. On 19 February 2011 08:00, Yury G. Kudryashov <[email protected]> wrote: > Is it hard to let hydra sign .nar archives? If hydra-created .nar archives > will be signed, a user without root access (hence, without priveledges to do > nix-channel --update) will be able to download & nix-store --import these > nars.
Yes, I believe this is the way to go in future. Administator should only be required to list the allowed substitution sources. I don't think it'll be difficult to make hydra sign the archives and make the substitute script check them. If you're interested in it, you can try to implement it. I doubt anyone would object to such a feature. Vlada _______________________________________________ nix-dev mailing list [email protected] https://mail.cs.uu.nl/mailman/listinfo/nix-dev
