diff options
author | Florian Klink <flokli@flokli.de> | 2023-01-26T13·18+0100 |
---|---|---|
committer | clbot <clbot@tvl.fyi> | 2023-01-27T14·06+0000 |
commit | a94a1434cc2a57b330a2ad6f310573fb70e15e8a (patch) | |
tree | bb9b4c32c03252ae32e409fe9bd893de19568f21 /ops/secrets/README.md | |
parent | bda5fc58d01d7513180da4456eb279a33f76bc1c (diff) |
fix(tvix/cli): handle SRI hashes in outputHash r/5772
Instead of being called with `md5`, `sha1`, `sha256` or `sha512`, `fetchurl.nix` (from corepkgs / `<nix`) can also be called with a `hash` attribute, being an SRI hash. In that case, `builtin.derivation` is called with `outputHashAlgo` being an empty string, and `outputHash` being an SRI hash string. In other cases, an SRI hash is passed as outputHash, but outputHashAlgo is set too. Nix does modify these values in (single, fixed) output specification it serializes to ATerm, but keeps it unharmed in `env`. Move this into a construct_output_hash helper function, that can be tested better in isolation. Change-Id: Id9d716a119664c44ea7747540399966752e20187 Reviewed-on: https://cl.tvl.fyi/c/depot/+/7933 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: flokli <flokli@flokli.de> Tested-by: BuildkiteCI
Diffstat (limited to 'ops/secrets/README.md')
0 files changed, 0 insertions, 0 deletions