Signing store paths: Difference between revisions
m Use lang=ini for nix.conf |
Specify that trusting is to be done on a separate machine |
||
| Line 36: | Line 36: | ||
=== Trusting store paths using a signing key === | === Trusting store paths using a signing key === | ||
On a machine that you want to trust the signed store's store paths, configure the Nix option {{manual|nix|command-ref/conf-file|<code>trusted-public-keys</code>|subsection=conf-trusted-public-keys}} with thepublic key from <code>/var/secrets/nix-cache-pub-key</code> on the machine with the signed store. Here is how you do it on NixOS: | |||
{{File|3={ | {{File|3={ | ||
# NixOS automatically includes the public key of the NixOS binary cache | # NixOS automatically includes the public key of the NixOS binary cache | ||