Support multiple upstream public keys#45
Merged
Conversation
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: Ib3176c35cae556dd716abe188e11f0106a6a6964
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: Ica38d9fc78e889cdfb28a6d02ad486836a6a6964
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: I3ab1e6a7143e146dba9fbde6d0158a6a6a6a6964
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: I3b1014c71717677fca285fcb28834f886a6a6964
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: I51a98d0d85d3cb4a4106f1026e1697026a6a6964
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds support configuring multiple public keys per upstream cache as described in #44
Since ncro is as transparent and stateless as possible, this aims to be allowing verification of narinfos signed by more than one key (for example, when using pull-through caches) without stepping on our shoes. The NixOS module ensures all relevant keys are added to
trusted-public-keys.