e0def5bc4b
Sodium's Ed25519 signatures are much shorter than OpenSSL's RSA signatures. Public keys are also much shorter, so they're now specified directly in the nix.conf option ‘binary-cache-public-keys’. The new command ‘nix-store --generate-binary-cache-key’ generates and prints a public and secret key.
51 lines
1.4 KiB
Perl
51 lines
1.4 KiB
Perl
package Nix::Config;
|
||
|
||
use MIME::Base64;
|
||
|
||
$version = "@PACKAGE_VERSION@";
|
||
|
||
$binDir = $ENV{"NIX_BIN_DIR"} || "@bindir@";
|
||
$libexecDir = $ENV{"NIX_LIBEXEC_DIR"} || "@libexecdir@";
|
||
$stateDir = $ENV{"NIX_STATE_DIR"} || "@localstatedir@/nix";
|
||
$manifestDir = $ENV{"NIX_MANIFESTS_DIR"} || "@localstatedir@/nix/manifests";
|
||
$logDir = $ENV{"NIX_LOG_DIR"} || "@localstatedir@/log/nix";
|
||
$confDir = $ENV{"NIX_CONF_DIR"} || "@sysconfdir@/nix";
|
||
$storeDir = $ENV{"NIX_STORE_DIR"} || "@storedir@";
|
||
|
||
$bzip2 = "@bzip2@";
|
||
$xz = "@xz@";
|
||
$curl = "@curl@";
|
||
$openssl = "@openssl@";
|
||
|
||
$useBindings = "@perlbindings@" eq "yes";
|
||
|
||
%config = ();
|
||
|
||
%binaryCachePublicKeys = ();
|
||
|
||
sub readConfig {
|
||
if (defined $ENV{'_NIX_OPTIONS'}) {
|
||
foreach my $s (split '\n', $ENV{'_NIX_OPTIONS'}) {
|
||
my ($n, $v) = split '=', $s, 2;
|
||
$config{$n} = $v;
|
||
}
|
||
} else {
|
||
my $config = "$confDir/nix.conf";
|
||
return unless -f $config;
|
||
|
||
open CONFIG, "<$config" or die "cannot open ‘$config’";
|
||
while (<CONFIG>) {
|
||
/^\s*([\w\-\.]+)\s*=\s*(.*)$/ or next;
|
||
$config{$1} = $2;
|
||
}
|
||
close CONFIG;
|
||
}
|
||
|
||
foreach my $s (split(/ /, $config{"binary-cache-public-keys"} // "")) {
|
||
my ($keyName, $publicKey) = split ":", $s;
|
||
next unless defined $keyName && defined $publicKey;
|
||
$binaryCachePublicKeys{$keyName} = decode_base64($publicKey);
|
||
}
|
||
}
|
||
|
||
return 1;
|