Try enabling the trustix service in the subscriber?

This still doesn't work yet.

diff --git a/checks/one-publisher.nix b/checks/one-publisher.nix
index 8fe584e70483103ff4bd3ac3d74d16346c520602..c24d3a991e720b47284d81fec09de0bb8e70b08e 100644 (file)
--- a/checks/one-publisher.nix
+++ b/checks/one-publisher.nix
@@ -67,6 +67,7 @@ let
         binaryCachePublicKeys = lib.mkForce [ "clint://@binaryCachePubKey@" ];
       };
       services.trustix = {
         binaryCachePublicKeys = lib.mkForce [ "clint://@binaryCachePubKey@" ];
       };
       services.trustix = {

+        enable = true;  # Fails with and without: https://github.com/tweak/trustix/issue/24

         subscribers = [{
           protocol = "nix";
           publicKey = {
         subscribers = [{
           protocol = "nix";
           publicKey = {