mirror of
https://github.com/gensokyo-zone/infrastructure.git
synced 2026-02-09 04:19:19 -08:00
Flakes: Trusted separation
This commit is contained in:
parent
924dbf67c3
commit
08676fb81d
7 changed files with 720 additions and 19 deletions
25
inputs.nix
25
inputs.nix
|
|
@ -1,9 +1,18 @@
|
|||
(import (
|
||||
let
|
||||
lock = builtins.fromJSON (builtins.readFile ./flake.lock);
|
||||
in fetchTarball {
|
||||
let
|
||||
lock = builtins.fromJSON (builtins.readFile ./flake.lock);
|
||||
lockTrusted = builtins.fromJSON (builtins.readFile ./trusted/flake.lock);
|
||||
flakeCompat = fetchTarball {
|
||||
url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
|
||||
sha256 = lock.nodes.flake-compat.locked.narHash; }
|
||||
) {
|
||||
src = ./.;
|
||||
}).defaultNix.inputs
|
||||
sha256 = lock.nodes.flake-compat.locked.narHash;
|
||||
};
|
||||
trusted = import flakeCompat {
|
||||
src = ./trusted;
|
||||
};
|
||||
nixfiles = import flakeCompat {
|
||||
src = ./.;
|
||||
};
|
||||
in nixfiles.defaultNix.inputs // {
|
||||
trusted = if builtins.getEnv "TRUSTED" != ""
|
||||
then trusted.defaultNix.inputs.trusted
|
||||
else ./empty;
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue