Module signing_wrapper

Module signing_wrapper 

Source
Expand description

This module provides a PathInfoService implementation that signs narinfos

Structsยง

KeyFileSigningPathInfoServiceConfig
ServiceBuilder implementation that builds a SigningPathInfoService that signs narinfos using a keyfile. The keyfile is parsed using parse_keypair, the expected format is the nix one (nix-store --generate-binary-cache-key for more informations).
SigningPathInfoService
PathInfoService that wraps around an inner PathInfoService and when put is called it extracts the underlying narinfo and signs it using a SigningKey. For the moment only the ed25519::signature::Signered25519::Signature is available using a keyfile (see KeyFileSigningPathInfoServiceConfig for more informations). However the implementation is generic (see nix_compat::narinfo::SigningKey documentation).