lix-releng-staging/scripts
Eelco Dolstra f3a5930488 Sign a subset of the .narinfo
We only need to sign the store path, NAR hash and references (the
"fingerprint"). Everything else is irrelevant to security. For
instance, the compression algorithm or the hash of the compressed NAR
don't matter as long as the contents of the uncompressed NAR are
correct.

(Maybe we should include derivers in the fingerprint, but they're
broken and nobody cares about them. Also, it might be nice in the
future if .narinfos contained signatures from multiple independent
signers. But that's impossible if the deriver is included in the
fingerprint, since everybody will tend to have a different deriver for
the same store path.)

Also renamed the "Signature" field to "Sig" since the format changed
in an incompatible way.
2015-02-04 17:59:31 +01:00
..
build-remote.pl.in build-remote.pl.in: Add some more trace messages 2014-11-12 13:56:01 +01:00
copy-from-other-stores.pl.in Shut up "Wide character in print" warning in copy-from-other-stores.pl 2015-01-15 17:56:56 +01:00
download-from-binary-cache.pl.in Set correct user agent for NAR downloads from binary caches 2015-01-15 12:05:27 +01:00
download-using-manifests.pl.in Shut up "Wide character" warnings in Perl scripts 2014-08-29 17:48:25 +02:00
find-runtime-roots.pl.in Revert "Scan /proc/<pid>/cmdline for GC roots" 2013-12-20 14:18:24 +01:00
install-nix-from-closure.sh Install cacert before running nix-channel 2014-12-13 16:53:21 +01:00
local.mk Fix "make dist" 2014-02-01 14:38:12 +01:00
nix-build.in Moves runHook to a later execution position 2015-01-28 13:39:48 +01:00
nix-channel.in nix-channel: Add --rollback flag 2014-10-14 12:08:04 +02:00
nix-collect-garbage.in nix-collect-garbage: Add --delete-older-than option 2014-03-30 00:54:16 +01:00
nix-copy-closure.in Fix nix-copy-closure --from 2014-10-15 15:05:13 -04:00
nix-generate-patches.in Use $XDG_RUNTIME_DIR for temporary files 2014-08-13 23:12:57 +02:00
nix-http-export.cgi.in Replace wrong (w.r.t. PATH) sed call with in-shell substitution 2009-02-19 20:46:45 +00:00
nix-install-package.in nix-install-package: follow symlinks 2015-01-30 11:30:21 +01:00
nix-prefetch-url.in Shut up "Wide character" warnings in Perl scripts 2014-08-29 17:48:25 +02:00
nix-profile.sh.in Always use https to fetch the Nixpkgs channel 2014-12-10 11:35:56 +01:00
nix-pull.in Shut up "Wide character" warnings in Perl scripts 2014-08-29 17:48:25 +02:00
nix-push.in Sign a subset of the .narinfo 2015-02-04 17:59:31 +01:00
nix-reduce-build.in Add support for ‘make installcheck’ 2013-11-25 18:47:03 +01:00
show-duplication.pl * `show-duplication.pl', a small utility that shows the amount of 2006-09-19 13:53:35 +00:00