nix flake archive: add --no-check-sigs option

zimbatm · zimbatm · commit 80a429348637 · 2025-05-27T10:05:21.000Z
Allows to copy the archive to a remote host and not get

    error: cannot add path '/nix/store/01x2k4nlxcpyd85nnr0b9gm89rm8ff4x-source' because it lacks a signature by a trusted key
diff --git a/src/nix/flake.cc b/src/nix/flake.cc
@@ -1051,6 +1051,10 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun
 {
     std::string dstUri;
 
+    CheckSigsFlag checkSigs = CheckSigs;
+
+    SubstituteFlag substitute = NoSubstitute;
+
     CmdFlakeArchive()
     {
         addFlag({
@@ -1059,6 +1063,11 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun
             .labels = {"store-uri"},
             .handler = {&dstUri},
         });
+        addFlag({
+            .longName = "no-check-sigs",
+            .description = "Do not require that paths are signed by trusted keys.",
+            .handler = {&checkSigs, NoCheckSigs},
+        });
     }
 
     std::string description() override
@@ -1122,7 +1131,8 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun
 
         if (!dryRun && !dstUri.empty()) {
             ref<Store> dstStore = dstUri.empty() ? openStore() : openStore(dstUri);
-            copyPaths(*store, *dstStore, sources);
+
+            copyPaths(*store, *dstStore, sources, NoRepair, checkSigs, substitute);
         }
     }
 };

Original file line number	Diff line number	Diff line change
`@@ -1051,6 +1051,10 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun`
`1051`	`1051`	`{`
`1052`	`1052`	`std::string dstUri;`
`1053`	`1053`
	`1054`	`+ CheckSigsFlag checkSigs = CheckSigs;`
	`1055`	`+`
	`1056`	`+ SubstituteFlag substitute = NoSubstitute;`
	`1057`	`+`
`1054`	`1058`	`CmdFlakeArchive()`
`1055`	`1059`	`{`
`1056`	`1060`	`addFlag({`
`@@ -1059,6 +1063,11 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun`
`1059`	`1063`	`.labels = {"store-uri"},`
`1060`	`1064`	`.handler = {&dstUri},`
`1061`	`1065`	`});`
	`1066`	`+ addFlag({`
	`1067`	`+ .longName = "no-check-sigs",`
	`1068`	`+ .description = "Do not require that paths are signed by trusted keys.",`
	`1069`	`+ .handler = {&checkSigs, NoCheckSigs},`
	`1070`	`+ });`
`1062`	`1071`	`}`
`1063`	`1072`
`1064`	`1073`	`std::string description() override`
`@@ -1122,7 +1131,8 @@ struct CmdFlakeArchive : FlakeCommand, MixJSON, MixDryRun`
`1122`	`1131`
`1123`	`1132`	`if (!dryRun && !dstUri.empty()) {`
`1124`	`1133`	`ref<Store> dstStore = dstUri.empty() ? openStore() : openStore(dstUri);`
`1125`		`- copyPaths(store, dstStore, sources);`
	`1134`	`+`
	`1135`	`+ copyPaths(store, dstStore, sources, NoRepair, checkSigs, substitute);`
`1126`	`1136`	`}`
`1127`	`1137`	`}`
`1128`	`1138`	`};`