manual: import needs root or trusted signature #1547
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
`nix-store --import` needs to be either run as root, or on a closure that's been signed by a trusted cache. Currently this is mentioned nowhere in the manual, so this makes it explicit
edolstra
reviewed
Sep 1, 2018
| @@ -1155,6 +1155,11 @@ that already exist in the Nix store are ignored. If a path refers to | |||
| another path that doesn’t exist in the Nix store, the import | |||
| fails.</para> | |||
|
|
|||
| <para> | |||
| Note: this needs to be either run as root, or on a seralization with | |||
| signatures from a trusted cache. | |||
There was a problem hiding this comment.
This is not quite correct. Import needs to be run as a user who has write access to the Nix store, or (when using the Nix daemon) a trusted user (one listed in the trusted-users option).
Also, there are no binary cache signatures in the export/import file format. There was a legacy signing mechanism, but it has been removed.
|
I marked this as stale due to inactivity. → More info |
|
I closed this issue due to inactivity. → More info |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
nix-store --importneeds to be either run as root, or on aclosure that's been signed by a trusted cache.
Currently this is mentioned nowhere in the manual, so this
makes it explicit