nix3-store-sign(1)

📦
version 2.35.3 · 13 versions
, in fedora 44

okay bestie 💖 welcome to nix3-store-sign(1) from the General Commands Manual ✨ it's giving "sign store paths with a local key", and yes it's experimental so the interface can change on you.

⚠️ Warning ⚠️

🚨 This program is experimental and its interface is subject to change. no cap, the vibes may shift under you.

✨ Name ✨

nix store sign — sign store paths with a local key 🔐

🌸 Synopsis 🌸

nix store sign [option…] installables…

💅 Options 💅

okay so here's the full menu, zero skips, we're eating every single flag 🍽️

  • --key-file, -k file — file containing the secret signing key 🔑
  • --stdin — read installables from the standard input. No default installable applied. 🫶

🧠 Common evaluation options 🧠

  • --arg name expr — pass the value expr as the argument name to Nix functions. 🎀
  • --arg-from-file name path — pass the contents of file path as the argument name to Nix functions. 📄
  • --arg-from-stdin name — pass the contents of stdin as the argument name to Nix functions. ⌨️
  • --argstr name string — pass the string string as the argument name to Nix functions. 🧵
  • --debugger — start an interactive environment if evaluation fails. 🐛
  • --eval-store store-url — the URL of the Nix store to use for evaluation, i.e. to store derivations (.drv files) and inputs referenced by them. 🏬
  • --impure — allow access to mutable paths and repositories. chaotic but permitted ✨
  • --include, -I path — add path to search path entries used to resolve lookup paths.
    • This option may be given multiple times. 🔁
    • Paths added through -I take precedence over the nix-path configuration setting and the NIX_PATH environment variable. 👑
  • --override-flake original-ref resolved-ref — override the flake registries, redirecting original-ref to resolved-ref. 🔄
  • --commit-lock-file — commit changes to the flake’s lock file. 💾
  • --inputs-from flake-url — use the inputs of the specified flake as registry entries. 📥
  • --no-registries — don’t allow lookups in the flake registries. ⚠️ DEPRECATED: use --no-use-registries instead. 🚫
  • --no-update-lock-file — do not allow any updates to the flake’s lock file. 🔒
  • --no-write-lock-file — do not write the flake’s newly generated lock file. 📝
  • --output-lock-file flake-lock-path — write the given lock file instead of flake.lock within the top-level flake. 🗂️
  • --override-input input-path flake-url — override a specific flake input (e.g. dwarffs/nixpkgs). The input path must not be empty. This implies --no-write-lock-file. 🎯
  • --recreate-lock-file — recreate the flake’s lock file from scratch. ⚠️ DEPRECATED: use nix flake update instead. 🔄
  • --reference-lock-file flake-lock-path — read the given lock file instead of flake.lock within the top-level flake. 📖
  • --update-input input-path — update a specific flake input (ignoring its previous entry in the lock file). ⚠️ DEPRECATED: use nix flake update instead. ⬆️
  • --debug — set the logging verbosity level to ‘debug’. 🐞
  • --log-format format — set the format of log output; one of raw, internal-json, bar or bar-with-logs. 🎨
  • --print-build-logs, -L — print full build logs on standard error. 📜
  • --quiet — decrease the logging verbosity level. 🤫
  • --verbose, -v — increase the logging verbosity level. 🔊

🌈 Miscellaneous global options 🌈

  • --help — show usage information. 🆘
  • --offline — disable substituters and consider all previously downloaded files up-to-date. ✈️
  • --option name value — set the Nix configuration setting name to value (overriding nix.conf). ⚙️
  • --refresh — consider all previously downloaded files out-of-date. 🔄
  • --repair — during evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths. 🛠️
  • --version — show version information. 🏷️

🎀 Options that change the interpretation of installables 🎀

  • --all — apply the operation to every store path. 🌐
  • --derivation — operate on the store derivation rather than its outputs. 🧬
  • --expr expr — interpret installables as attribute paths relative to the Nix expression expr. 🧮
  • --file, -f file — interpret installables as attribute paths relative to the Nix expression stored in file. If file is the character -, then a Nix expression is read from standard input. Implies --impure. 📁
  • --recursive, -r — apply operation to closure of the specified paths. 🌀
📝 Note: See man nix.conf for overriding configuration settings with command line flags. 👑

and that's a wrap bestie 💖 this page is nix3-store-sign(1) from the General Commands Manual. The footer is just nix3-store-sign(1) again — no extra source/version/date info printed here — so consider this your cute sign-off, periodt 🫶✨

📦 where this page comes from