nix3-store-copy-sigs(1)

📦
version 2.35.3 · 13 versions
, in fedora 44

💅 nix3-store-copy-sigs(1) — the manual, but make it make sense

okay bestie, you found your way into the nix3-store-copy-sigs page of the General Commands Manual and I am SO proud of you 🫶 this one's short, it's cute, and it does exactly one job: it copies store path signatures around. let's get into it ✨

⚠️ Warning (read this first, fr fr)

This program is experimental and its interface is subject to change. no cap. it might shift under your feet, so don't build your whole personality around it 💀

🌸 Name

nix store copy-sigs — copy store path signatures from substituters 👑

✨ Synopsis

nix store copy-sigs [option…] installables…

that's the whole vibe. options first, installables after, go off 💖

🍓 Examples

  • To copy signatures from a binary cache to the local store:
# nix store copy-sigs --substituter https://cache.nixos.org \
  --recursive /nix/store/q833p12cmm9qknyp1walqih941msnb9z-hello-2.12.1
  • To copy signatures from one binary cache to another:
# nix store copy-sigs --substituter https://cache.nixos.org \
  --store file:///tmp/binary-cache \
  --recursive -v \
  /nix/store/q833p12cmm9qknyp1walqih941msnb9z-hello-2.12.1
imported 2 signatures

see that imported 2 signatures at the end? that's the little victory lap 🎀

💜 Description

nix store copy-sigs copies store path signatures from one store to another. simple as. iconic behavior honestly.

ngl, don't do this — it is not advised to copy signatures to binary cache stores. here's why: binary cache signatures are stored in .narinfo files, and since those are cached aggressively, clients may not see the new signatures quickly. so instead of copying sigs in after the fact, it is therefore better to set any required signatures when the paths are first uploaded to the binary cache. do it right the first time, bestie 😭

Store paths are processed in parallel. the amount of parallelism is controlled by the http-connections settings. multitasking queen 💅

🦋 Options

  • --stdin — Read installables from the standard input. No default installable applied.
  • --substituter, -s store-uri — Copy signatures from the specified store.

👑 Common evaluation options

  • --arg name expr — Pass the value expr as the argument name to Nix functions.
  • --arg-from-file name path — Pass the contents of file path as the argument name to Nix functions.
  • --arg-from-stdin name — Pass the contents of stdin as the argument name to Nix functions.
  • --argstr name string — Pass the string string as the argument name to Nix functions.
  • --debugger — Start an interactive environment if evaluation fails.
  • --eval-store store-url — The URL of the Nix store to use for evaluation, i.e. to store derivations (.drv files) and inputs referenced by them.
  • --impure — Allow access to mutable paths and repositories. living dangerously, love that for you 🙈
  • --include, -I path — Add path to search path entries used to resolve lookup paths.

This option may be given multiple times.

Paths added through -I take precedence over the nix-path configuration setting and the NIX_PATH environment variable.

  • --override-flake original-ref resolved-ref — Override the flake registries, redirecting original-ref to resolved-ref.
  • --commit-lock-file — Commit changes to the flake's lock file.
  • --inputs-from flake-url — Use the inputs of the specified flake as registry entries.
  • --no-registries — Don't allow lookups in the flake registries.
DEPRECATED — Use --no-use-registries instead.
  • --no-update-lock-file — Do not allow any updates to the flake's lock file.
  • --no-write-lock-file — Do not write the flake's newly generated lock file.
  • --output-lock-file flake-lock-path — Write the given lock file instead of flake.lock within the top-level flake.
  • --override-input input-path flake-url — Override a specific flake input (e.g. dwarffs/nixpkgs). The input-path must not be empty. This implies --no-write-lock-file.
  • --recreate-lock-file — Recreate the flake's lock file from scratch.
DEPRECATED — Use nix flake update instead.
  • --reference-lock-file flake-lock-path — Read the given lock file instead of flake.lock within the top-level flake.
  • --update-input input-path — Update a specific flake input (ignoring its previous entry in the lock file).
DEPRECATED — Use nix flake update instead.
  • --debug — Set the logging verbosity level to 'debug'.
  • --log-format format — Set the format of log output; one of raw, internal-json, bar or bar-with-logs.
  • --print-build-logs, -L — Print full build logs on standard error.
  • --quiet — Decrease the logging verbosity level.
  • --verbose, -v — Increase the logging verbosity level.

⭐ Miscellaneous global options

  • --help — Show usage information.
  • --offline — Disable substituters and consider all previously downloaded files up-to-date.
  • --option name value — Set the Nix configuration setting name to value (overriding nix.conf).
  • --refresh — Consider all previously downloaded files out-of-date.
  • --repair — During evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths.
  • --version — Show version information.

🎀 Options that change the interpretation of installables

  • --all — Apply the operation to every store path.
  • --derivation — Operate on the store derivation rather than its outputs.
  • --expr expr — Interpret installables as attribute paths relative to the Nix expression expr.
  • --file, -f file — Interpret installables as attribute paths relative to the Nix expression stored in file. If file is the character -, then a Nix expression is read from standard input. Implies --impure.
  • --recursive, -r — Apply operation to closure of the specified paths.
Note — See man nix.conf for overriding configuration settings with command line flags.

and that's the whole page, bestie 💜 you ate. go copy some sigs (just not to a binary cache, i'm begging you 😭).

source/version + date drop, cute sign-off style: this one's stamped nix3-store-copy-sigs(1) front and back, General Commands Manual energy, mwah 💖

📦 where this page comes from