maralorn/nixos-config
1
0
Fork 0
Code Wiki Activity

Tightening result caching security.

Browse source
This commit is contained in:
Malte Brandy 2021-01-10 22:36:03 +01:00
parent c0622e77b4
commit 9d9ee79550
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nixos/roles/laminar/default.nix
View file

@ -5,7 +5,7 @@ let
cfgDir = "${stateDir}/cfg"; cfgDir = "${stateDir}/cfg";
cfg = config.services.laminar; cfg = config.services.laminar;
cacheResult = "${pkgs.writeShellScript "cache-result-as-root" cacheResult = "${pkgs.writeShellScript "cache-result-as-root"
"${pkgs.nix}/bin/nix-store -r --indirect --add-root /var/cache/gc-links/$2 $1"}"; ''echo "Cached build-result $1 to $(${pkgs.nix}/bin/nix-store -r --indirect --add-root "/var/cache/gc-links/$2" "$1")."''}";
in { in {
options = { options = {
services.laminar = { services.laminar = {
@ -42,7 +42,7 @@ in {
ghcArgs = [ "-threaded" ]; ghcArgs = [ "-threaded" ];
} (builtins.readFile ./nix-jobs.hs); } (builtins.readFile ./nix-jobs.hs);
"cache-result" = pkgs.writeShellScript "cache-result" '' "cache-result" = pkgs.writeShellScript "cache-result" ''
/run/wrappers/bin/sudo ${cacheResult} $1 $2 /run/wrappers/bin/sudo ${cacheResult} "$1" "$2"
''; '';
}; };
jobs = { jobs = {