make hut cache a trusted substituter

This commit is contained in:
Aleix Boné 2025-04-08 18:25:04 +02:00
parent 3590879c17
commit f4eb5f27d3
Signed by: abonerib
SSH Key Fingerprint: SHA256:Jmq7aNH8XDdGy7E9dqfqrc/LRaVqhnFgDgdxlFw/pl8
2 changed files with 9 additions and 6 deletions

View File

@ -4,7 +4,7 @@
# Don't add hut as a cache to itself # Don't add hut as a cache to itself
assert config.networking.hostName != "hut"; assert config.networking.hostName != "hut";
{ {
substituters = [ "https://jungle.bsc.es/cache" ]; trusted-substituters = [ "https://jungle.bsc.es/cache" ];
trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ]; trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ];
}; };
} }

View File

@ -23,7 +23,7 @@ a good candidate for low noise executions.
We provide a binary cache in `hut`, with the aim of avoiding unnecessary We provide a binary cache in `hut`, with the aim of avoiding unnecessary
recompilation of packages. recompilation of packages.
The cache should contain common packages from bsckpkgs, but we don't provide The cache should contain common packages from bscpkgs, but we don't provide
any guarantee that of what will be available in the cache, or for how long. any guarantee that of what will be available in the cache, or for how long.
We recommend following the latest version of the `jungle` flake to avoid cache We recommend following the latest version of the `jungle` flake to avoid cache
misses. misses.
@ -38,7 +38,8 @@ enable it for all builds in the system.
```nix ```nix
{ ... }: { { ... }: {
nix.settings = { nix.settings = {
substituters = [ "https://jungle.bsc.es" ]; substituters = [ "https://jungle.bsc.es/cache" ];
trusted-substituters = [ "https://jungle.bsc.es/cache" ];
trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ]; trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ];
}; };
} }
@ -53,13 +54,15 @@ The cache can also be specified in a per-command basis through the flags
nix build --substituters "https://jungle.bsc.es/cache" --trusted-public-keys "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" <...> nix build --substituters "https://jungle.bsc.es/cache" --trusted-public-keys "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" <...>
``` ```
Note: you'll have to be a trusted user.
### Nix configuration file (non-nixos) ### Nix configuration file (non-nixos)
If using nix outside of NixOS, you'll have to update `nix.conf` If using nix outside of NixOS, you'll have to update `nix.conf`
```bash ```
echo "substituters = https://jungle.bsc.es" >> /etc/nix/nix.conf # echo "trusted-substituters = https://jungle.bsc.es/cache" >> /etc/nix/nix.conf
echo "trusted-public-keys = jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" >> /etc/nix/nix.conf # echo "trusted-public-keys = jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" >> /etc/nix/nix.conf
``` ```
### Hint in flakes ### Hint in flakes