|
The following nix functions allow easily creating derivations for
building a signed releases directory for project(s) to be served via
e. g. HTTP.
* buildGitTarball: builds a reproducible .tar.gz for a given git
revision or tag (similar to git archive, but we don't actually
reuse it in favor of fetchgit).
* bundleSignedReleases: symlinks tarballs generated using
buildGitTarball and accompanying (manually provided) signatures into a
directory and verifies the signatures to ensure buildGitTarball is
donig what it's supposed to.
|