aibi/build-attestation
SHA256
Watch
1
0
Fork
You've already forked build-attestation
 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Start continuous instantiation of nixpkgs artifacts. #1

New issue
Open
opened 2026-11-12 01:10:03 +00:00 by aibi · 0 comments
aibi commented 2026-11-12 01:10:03 +00:00
Owner

Start tracking the latest release branch and the unstable branch. For each new commit (ongoing), we want to instantiate a set of attributes - The instantiations must match hydra jobs (e.g. https://hydra.nixos.org/build/352884728/reproduce) so that we have build-receipt nodes in our graph. For each item observed, add it to the nixpkgs build attestation log (a synthetic log that we can use normally, even though it is not participating in our system).

An example of the command for the above job:

nix-instantiate nixos/release-combined.nix -A nixos.amazonImage.x86_64-linux \
  --arg nixpkgs '{ outPath = /home/ubuntu/nixpkgs; rev = "ac588ef1c914865dad517b337ea0eb9694a4021c"; shortRev = "ac588ef1c914"; revCount = 1018227; }' \
  --arg stableBranch true \
  --arg supportedSystems '[ "x86_64-linux" "aarch64-linux" ]' \
  -I nixpkgs=/home/ubuntu/nixpkgs
Start tracking the latest release branch and the `unstable` branch. For each new commit (ongoing), we want to instantiate a set of attributes - The instantiations must match hydra jobs (e.g. `https://hydra.nixos.org/build/352884728/reproduce`) so that we have build-receipt nodes in our graph. For each item observed, add it to the nixpkgs build attestation log (a synthetic log that we can use normally, even though it is not participating in our system). An example of the command for the above job: ``` nix-instantiate nixos/release-combined.nix -A nixos.amazonImage.x86_64-linux \ --arg nixpkgs '{ outPath = /home/ubuntu/nixpkgs; rev = "ac588ef1c914865dad517b337ea0eb9694a4021c"; shortRev = "ac588ef1c914"; revCount = 1018227; }' \ --arg stableBranch true \ --arg supportedSystems '[ "x86_64-linux" "aarch64-linux" ]' \ -I nixpkgs=/home/ubuntu/nixpkgs ```
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
aibi/build-attestation#1
No description provided.