hercules-ci / support

User feedback, questions and our public roadmap. help@hercules-ci.com
5 stars 1 forks source link

is it possible to use cachix API keys rather the traditional signing keys? #60

Open nixinator opened 2 years ago

nixinator commented 2 years ago

As highlighted here.

https://blog.cachix.org/posts/2020-11-09-write-access-control-for-binary-caches/

roberth commented 2 years ago

Yes, this is supported. The reference and guide documentation needs to be updated to clarify this.

Cachix caches without signingKeys will be pushed to, as part of the write token feature (Cachix-managed signing keys). Make sure to enter an authToken with write access. CachixCache reference doc: https://docs.hercules-ci.com/hercules-ci-agent/binary-caches-json/#_cachixcache

nixinator commented 2 years ago

seems to be working well. Here's what i used in my binary-caches.json

{ "name-of-the-cachix-cache":
    { "kind": "CachixCache"
    , "authToken": "auth write token generated for the above cache on cachix.org"
    , "publicKeys": ["the public key of the cachix cache"]
    }
}