From e39999ed48f7bce81555d1cd58918e59dffcf922 Mon Sep 17 00:00:00 2001 From: Eelco Dolstra Date: Thu, 7 Apr 2016 14:14:06 +0200 Subject: Sign locally-built paths MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Locally-built paths are now signed automatically using the secret keys specified by the ‘secret-key-files’ option. --- src/libstore/build.cc | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/libstore/build.cc') diff --git a/src/libstore/build.cc b/src/libstore/build.cc index 31c321c83ade..1a51d0ec402d 100644 --- a/src/libstore/build.cc +++ b/src/libstore/build.cc @@ -2748,6 +2748,7 @@ void DerivationGoal::registerOutputs() trusted. */ if (!info.ultimate) { info.ultimate = true; + worker.store.signPathInfo(info); worker.store.registerValidPaths({info}); } @@ -2808,6 +2809,8 @@ void DerivationGoal::registerOutputs() info.references = references; info.deriver = drvPath; info.ultimate = true; + worker.store.signPathInfo(info); + infos.push_back(info); } -- cgit 1.4.1