Mic92/nix-fast-build

remote building and propagation of substituters/trusted-public-keys?

Opened this issue · 2 comments

colemickens commented

I'm looking at removing almost all of my "nix wrapper" script in favor of nix-fast-build.

One other thing that my wrapper script does is re-specify substituters and trusted-public-keys and ensure that the remote build is performed with them.

  1. Does nix-fast-build do this? (If so, I can send a PR noting it in the README in the remote builder section)
  2. If not, does it make sense to add such a feature?
  3. (I wonder if nix has or should have a feature to print the net of global and user nix conf and use that?)
colemickens commented

I suppose I may still need this, since I also use it to ensure that when I deploy to a (potentially fresh) host, it re-specifies the trusted-caches to use. And I can't remember if nix build -j0 --store "ssh-ng://..." propagates them either.

Mic92 commented

This is not implemented yet. It would also require that your remote user is a trusted user to make this effective.