Remove `extra-substituters` and `extra-trusted-public-keys` from nix

Plutonomicon / plutarch-plutus

Typed eDSL for writing UPLC /ˈpluː.tɑːk/

MIT License

123 stars 63 forks source link

Remove `extra-substituters` and `extra-trusted-public-keys` from nix #670

Closed SeungheonOh closed 3 months ago

SeungheonOh commented 3 months ago

extra-substituters and extra-trusted-public-keys in flake's nixConfig is unsafe. Removing this and adding documentation for users to add binary cache by themselves.

brainrake commented 3 months ago

Here's an example documentation you can copy https://github.com/mlabs-haskell/cardano.nix/blob/main/docs/getting-started/installation.md?plain=1#L11

brainrake commented 3 months ago

Motivation: the substituter from nixConfig can only be used if the user running nix is added to trusted-users in /etc/nix/nix.conf which effectively gives them passwordless root. https://nixos.org/manual/nix/stable/command-ref/conf-file.html?highlight=trusted-user#conf-trusted-users