nix_compat/narinfo/
fingerprint.rs

1use crate::{nixbase32, store_path::StorePathRef};
2
3/// Computes the fingerprint string for certain fields in a [super::NarInfo].
4/// This fingerprint is signed by an ed25519 key, and in the case of a Nix HTTP
5/// Binary cache, included in the NARInfo files served from there.
6pub fn fingerprint<'a, R: Iterator<Item = &'a StorePathRef<'a>>>(
7    store_path: &StorePathRef,
8    nar_sha256: &[u8; 32],
9    nar_size: u64,
10    references: R,
11) -> String {
12    format!(
13        "1;{};sha256:{};{};{}",
14        store_path.to_absolute_path(),
15        nixbase32::encode(nar_sha256),
16        nar_size,
17        // references are absolute paths, joined with `,`.
18        references
19            .map(|r| r.to_absolute_path())
20            .collect::<Vec<String>>()
21            .join(",")
22    )
23}
24
25#[cfg(test)]
26mod tests {
27    use crate::narinfo::NarInfo;
28
29    const NARINFO_STR: &str = r#"StorePath: /nix/store/syd87l2rxw8cbsxmxl853h0r6pdwhwjr-curl-7.82.0-bin
30URL: nar/05ra3y72i3qjri7xskf9qj8kb29r6naqy1sqpbs3azi3xcigmj56.nar.xz
31Compression: xz
32FileHash: sha256:05ra3y72i3qjri7xskf9qj8kb29r6naqy1sqpbs3azi3xcigmj56
33FileSize: 68852
34NarHash: sha256:1b4sb93wp679q4zx9k1ignby1yna3z7c4c2ri3wphylbc2dwsys0
35NarSize: 196040
36References: 0jqd0rlxzra1rs38rdxl43yh6rxchgc6-curl-7.82.0 6w8g7njm4mck5dmjxws0z1xnrxvl81xa-glibc-2.34-115 j5jxw3iy7bbz4a57fh9g2xm2gxmyal8h-zlib-1.2.12 yxvjs9drzsphm9pcf42a4byzj1kb9m7k-openssl-1.1.1n
37Deriver: 5rwxzi7pal3qhpsyfc16gzkh939q1np6-curl-7.82.0.drv
38Sig: cache.nixos.org-1:TsTTb3WGTZKphvYdBHXwo6weVILmTytUjLB+vcX89fOjjRicCHmKA4RCPMVLkj6TMJ4GMX3HPVWRdD1hkeKZBQ==
39Sig: test1:519iiVLx/c4Rdt5DNt6Y2Jm6hcWE9+XY69ygiWSZCNGVcmOcyL64uVAJ3cV8vaTusIZdbTnYo9Y7vDNeTmmMBQ==
40"#;
41
42    #[test]
43    fn fingerprint() {
44        let parsed = NarInfo::parse(NARINFO_STR).expect("must parse");
45        assert_eq!(
46            "1;/nix/store/syd87l2rxw8cbsxmxl853h0r6pdwhwjr-curl-7.82.0-bin;sha256:1b4sb93wp679q4zx9k1ignby1yna3z7c4c2ri3wphylbc2dwsys0;196040;/nix/store/0jqd0rlxzra1rs38rdxl43yh6rxchgc6-curl-7.82.0,/nix/store/6w8g7njm4mck5dmjxws0z1xnrxvl81xa-glibc-2.34-115,/nix/store/j5jxw3iy7bbz4a57fh9g2xm2gxmyal8h-zlib-1.2.12,/nix/store/yxvjs9drzsphm9pcf42a4byzj1kb9m7k-openssl-1.1.1n",
47            parsed.fingerprint()
48        );
49    }
50}
nix_compat/narinfo/fingerprint.rs

nix_compat/narinfo/
fingerprint.rs
