You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
File secrets contract: sops-nix and agenix providers
Examples for NixOS/nixpkgs#569488. The two modules show how sops-nix and agenix can provide the file secrets contract. They need no change in these projects.
sops-file-secrets.nix: sops.fileSecrets.<name> makes sops.secrets.<name>.
agenix-file-secrets.nix: age.fileSecrets.<name> makes age.secrets.<name>.
usage.nix: services.stash gets two secrets from sops-nix and one from agenix.
The consumer sets request (owner, group, mode) and the provider sets response.path. The user connects the two and does not repeat the owner, group or mode of the service. providerOptions go to sops.secrets.<name> or age.secrets.<name> as they are. If a value in providerOptions is different from the value in request, the evaluation fails.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bisecting is a feature of version control systems such as Git and Mercurial to easily pinpoint regressions. Owing to their reproducibility, Nix and NixOS are well-suited to this. As a result, there are a few common use-cases for Nix.
(If you don't have git available, you can make it available in a shell using:)