-
Notifications
You must be signed in to change notification settings - Fork 119
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: switch from rage to age #230
Conversation
191097d
to
0ab68a5
Compare
I looked at the most recent Darwin failure and it looks like LnL7/nix-darwin#149 -- I should be able to take a look later today (as I recall you don't have a Darwin system). |
3f07d89
to
4055259
Compare
Sorry, I accidentally pushed to the wrong remote so reset to your last commit and force-pushed to revert. |
I think the problem is that we're specifying this nix config in the cachix installer, then using the default nix config when installing One possible fix would be to specify any necessary system-wide nix settings as part of the nix-darwin module and just Alternatively, I suppose we could:
|
@ryantm that seems to do the trick. Let me know what you think. |
Why === * Someone said age works better with password protected keys, requiring entering the password less often. * We switched to rage from age in 07ce686 because it was limiting recipients to 20. This was fixed FiloSottile/age#139 What changed === * Switch from rage back to age (the reference implementation) in all the spots * Update the docs to show how to switch back to Rage * Skip keys that are empty files, which fixes the integration test.
nix-darwin is detecting `/etc/nix/nix.conf` from the cachix/install-nix-action and refusing to overwrite it, failing the nix-darwin activation and therefore the rest of CI. This commit `mv`s the existing `nix.conf` to avoid the above, and then adds support for new-style nix commands and flakes to the nix-darwin configuration to allow their subsequent use in CI. It also removes the nix config from the `cachix/install-nix-action` step, which was duplicated effort since we are blowing it away with nix-darwin anyway. Relevant: - LnL7/nix-darwin#149
4ab4f55
to
6ce42cc
Compare
Why
What changed