diff options
Diffstat (limited to 'doc/manual/command-ref/conf-file.xml')
| -rw-r--r-- | doc/manual/command-ref/conf-file.xml | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/doc/manual/command-ref/conf-file.xml b/doc/manual/command-ref/conf-file.xml index a28f70899141..c3a9cc56063a 100644 --- a/doc/manual/command-ref/conf-file.xml +++ b/doc/manual/command-ref/conf-file.xml @@ -402,12 +402,15 @@ false</literal>.</para> </varlistentry> - <varlistentry><term><literal>signed-binary-caches</literal></term> + <varlistentry><term><literal>require-sigs</literal></term> - <listitem><para>If set to <literal>*</literal> (the default), Nix - will only download binaries if they are signed using one of the - keys listed in <option>trusted-public-keys</option>. Set to - the empty string to disable signature checking.</para></listitem> + <listitem><para>If set to <literal>true</literal> (the default), + any non-content-addressed path added or copied to the Nix store + (e.g. when substituting from a binary cache) must have a valid + signature, that is, be signed using one of the keys listed in + <option>trusted-public-keys</option>. Set to + <literal>false</literal> to disable signature + checking.</para></listitem> </varlistentry> |