X-Git-Url: http://git.scottworley.com/auto-upgrade-with-pinch/blobdiff_plain/c1430067aa042d9dd6e3b1e103d336094135eb97..f1a53b29b8269cb5dd28a3285bc95a7df37f9a16:/overlays/keyedgit.nix diff --git a/overlays/keyedgit.nix b/overlays/keyedgit.nix deleted file mode 100644 index 6cce6fe..0000000 --- a/overlays/keyedgit.nix +++ /dev/null @@ -1,40 +0,0 @@ -# Following the instructions at https://tribut.de/blog/git-commit-signatures-trusted-keys - -self: super: { - keyedgit = keys: - let - keyfile = if builtins.isList keys then - super.runCommand "keyfile" { } '' - cat ${super.lib.escapeShellArgs keys} > $out - '' - else - keys; - homelessGPG = super.writeShellScript "homeless-gpg" '' - export GNUPGHOME=$(mktemp -d) - trap 'rm -r "$GNUPGHOME"' EXIT - ${self.gnupg}/bin/gpg "$@" - ''; - keyring = super.runCommand "keyedkeyring.gpg" { } '' - ${homelessGPG} --no-default-keyring --keyring=$out --import ${keyfile} - ''; - keyids = super.runCommand "keyids" { } '' - ${homelessGPG} --no-default-keyring --with-colons --show-keys ${keyfile} | - ${self.gawk}/bin/awk -F: '$1 == "pub" { print $5 }' > $out - ''; - keyedGPG = super.writeShellScript "keyed-gpg" '' - trusted_key_args=() - while read keyid;do - trusted_key_args+=( --trusted-key "$keyid" ) - done < ${keyids} - ${homelessGPG} --no-default-keyring --keyring=${keyring} "''${trusted_key_args[@]}" "$@" - ''; - in super.symlinkJoin { - name = "keyedgit"; - paths = [ self.git ]; - buildInputs = [ super.makeWrapper ]; - postBuild = '' - wrapProgram "$out/bin/git" \ - --add-flags '-c gpg.program=${keyedGPG}' - ''; - }; -}