-
Notifications
You must be signed in to change notification settings - Fork 1
/
extra-builtins.nix
32 lines (32 loc) · 1.17 KB
/
extra-builtins.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
{ exec, ... }: {
secrets = exec [ "cat" "/secrets/nixos/default.nix" ] {
# compress and base64 the file to make it representable in nix,
# then decompress it back in a derivation (shouldn't there be a better way...)
copyToStore = pkgs: name: path:
let
archive = exec [ "${pkgs.bash}/bin/bash" "-c" ''
cd /secrets/nixos
echo '"'"$(
${pkgs.gnutar}/bin/tar -I ${pkgs.zstd}/bin/zstd --exclude-vcs \
--transform='s#'${pkgs.lib.escapeShellArg path}'#!#' \
-c -- ${pkgs.lib.escapeShellArg path} | base64 -w0
)"'"'
'' ];
in derivation {
__contentAddressed = true;
outputHashAlgo = "sha256";
outputHashMode = "recursive";
preferLocalBuild = true;
allowSubstitutes = false;
allowedReferences = [];
passAsFile = [ "archive" ];
inherit name archive;
inherit (pkgs) system;
builder = "${pkgs.bash}/bin/bash";
args = [ "-c" ''
${pkgs.coreutils}/bin/base64 -d "$archivePath" |
${pkgs.gnutar}/bin/tar -P --transform="s#!#$out#" -I ${pkgs.zstd}/bin/zstd -x
'' ];
};
};
}