workflow: sign all just in case something got missed

This commit is contained in:
cy 2025-03-28 10:48:25 -04:00
parent d4bf0f3ef5
commit e610ca24e1
Signed by: cy
SSH key fingerprint: SHA256:o/geVWV4om1QhUSkKvDQeW/eAihwnjyXkqMwrVdbuts
2 changed files with 3 additions and 0 deletions

View file

@ -55,6 +55,7 @@ jobs:
if: always() if: always()
run: | run: |
nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose
nix store sign --store 's3://nixcache?endpoint=s3.cy7.sh' -k /home/runner/cache-priv-key.pem --all
build-homes: build-homes:
strategy: strategy:
fail-fast: false fail-fast: false
@ -94,3 +95,4 @@ jobs:
if: always() if: always()
run: | run: |
nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose
nix store sign --store 's3://nixcache?endpoint=s3.cy7.sh' -k /home/runner/cache-priv-key.pem --all

View file

@ -45,6 +45,7 @@ jobs:
if: always() if: always()
run: | run: |
nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose nix copy --all --to 's3://nixcache?endpoint=s3.cy7.sh' --verbose
nix store sign --store 's3://nixcache?endpoint=s3.cy7.sh' -k /home/runner/cache-priv-key.pem --all
- name: prepare tarball to upload - name: prepare tarball to upload
run: nix run github:nixos/nixpkgs#gnutar hcvf result.tar result run: nix run github:nixos/nixpkgs#gnutar hcvf result.tar result
- name: upload result - name: upload result