140 lines
3.6 KiB
C++
140 lines
3.6 KiB
C++
#include "command.hh"
|
|
#include "shared.hh"
|
|
#include "store-api.hh"
|
|
#include "thread-pool.hh"
|
|
|
|
#include <atomic>
|
|
|
|
using namespace nix;
|
|
|
|
struct CmdCopySigs : StorePathsCommand
|
|
{
|
|
Strings substituterUris;
|
|
|
|
CmdCopySigs()
|
|
{
|
|
mkFlag('s', "substituter", {"store-uri"}, "use signatures from specified store", 1,
|
|
[&](Strings ss) { substituterUris.push_back(ss.front()); });
|
|
}
|
|
|
|
std::string name() override
|
|
{
|
|
return "copy-sigs";
|
|
}
|
|
|
|
std::string description() override
|
|
{
|
|
return "copy path signatures from substituters (like binary caches)";
|
|
}
|
|
|
|
void run(ref<Store> store, Paths storePaths) override
|
|
{
|
|
if (substituterUris.empty())
|
|
throw UsageError("you must specify at least one substituter using '-s'");
|
|
|
|
// FIXME: factor out commonality with MixVerify.
|
|
std::vector<ref<Store>> substituters;
|
|
for (auto & s : substituterUris)
|
|
substituters.push_back(openStore(s));
|
|
|
|
ThreadPool pool;
|
|
|
|
std::string doneLabel = "done";
|
|
std::atomic<size_t> added{0};
|
|
|
|
logger->setExpected(doneLabel, storePaths.size());
|
|
|
|
auto doPath = [&](const Path & storePath) {
|
|
Activity act(*logger, lvlInfo, format("getting signatures for '%s'") % storePath);
|
|
|
|
checkInterrupt();
|
|
|
|
auto info = store->queryPathInfo(storePath);
|
|
|
|
StringSet newSigs;
|
|
|
|
for (auto & store2 : substituters) {
|
|
try {
|
|
auto info2 = store2->queryPathInfo(storePath);
|
|
|
|
/* Don't import signatures that don't match this
|
|
binary. */
|
|
if (info->narHash != info2->narHash ||
|
|
info->narSize != info2->narSize ||
|
|
info->references != info2->references)
|
|
continue;
|
|
|
|
for (auto & sig : info2->sigs)
|
|
if (!info->sigs.count(sig))
|
|
newSigs.insert(sig);
|
|
} catch (InvalidPath &) {
|
|
}
|
|
}
|
|
|
|
if (!newSigs.empty()) {
|
|
store->addSignatures(storePath, newSigs);
|
|
added += newSigs.size();
|
|
}
|
|
|
|
logger->incProgress(doneLabel);
|
|
};
|
|
|
|
for (auto & storePath : storePaths)
|
|
pool.enqueue(std::bind(doPath, storePath));
|
|
|
|
pool.process();
|
|
|
|
printInfo(format("imported %d signatures") % added);
|
|
}
|
|
};
|
|
|
|
static RegisterCommand r1(make_ref<CmdCopySigs>());
|
|
|
|
struct CmdSignPaths : StorePathsCommand
|
|
{
|
|
Path secretKeyFile;
|
|
|
|
CmdSignPaths()
|
|
{
|
|
mkFlag('k', "key-file", {"file"}, "file containing the secret signing key", &secretKeyFile);
|
|
}
|
|
|
|
std::string name() override
|
|
{
|
|
return "sign-paths";
|
|
}
|
|
|
|
std::string description() override
|
|
{
|
|
return "sign the specified paths";
|
|
}
|
|
|
|
void run(ref<Store> store, Paths storePaths) override
|
|
{
|
|
if (secretKeyFile.empty())
|
|
throw UsageError("you must specify a secret key file using '-k'");
|
|
|
|
SecretKey secretKey(readFile(secretKeyFile));
|
|
|
|
size_t added{0};
|
|
|
|
for (auto & storePath : storePaths) {
|
|
auto info = store->queryPathInfo(storePath);
|
|
|
|
auto info2(*info);
|
|
info2.sigs.clear();
|
|
info2.sign(secretKey);
|
|
assert(!info2.sigs.empty());
|
|
|
|
if (!info->sigs.count(*info2.sigs.begin())) {
|
|
store->addSignatures(storePath, info2.sigs);
|
|
added++;
|
|
}
|
|
}
|
|
|
|
printInfo(format("added %d signatures") % added);
|
|
}
|
|
};
|
|
|
|
static RegisterCommand r3(make_ref<CmdSignPaths>());
|