aboutsummaryrefslogtreecommitdiff
path: root/contrib/guix/guix-attest
diff options
context:
space:
mode:
authorCarl Dong <contact@carldong.me>2021-05-03 13:12:15 -0400
committerCarl Dong <contact@carldong.me>2021-05-03 13:18:19 -0400
commitfeda2c8e3180cb983c35976d4440cea23a155b7f (patch)
tree7510401f056e7905b115862de543a6ac80a91fb7 /contrib/guix/guix-attest
parentd522d8006b891eccd7901faf391f9c041ddf8e38 (diff)
guix: Skip attesting to dist-archive
We already attest to the relevant dist-archive in inputs.SHA256SUMS, which is recorded at build-time. We use a SKIPATTEST.TAG file to indicate output directories which do not require attestation (much like the CACHEDIR.TAG specification). Generally, it's better to have build scripts declare properties of directories instead of introducing name-based special cases in attest scripts since build scripts have a more detailed context of what is going on.
Diffstat (limited to 'contrib/guix/guix-attest')
-rwxr-xr-xcontrib/guix/guix-attest4
1 files changed, 4 insertions, 0 deletions
diff --git a/contrib/guix/guix-attest b/contrib/guix/guix-attest
index 5093dcb69d..8b4746caf9 100755
--- a/contrib/guix/guix-attest
+++ b/contrib/guix/guix-attest
@@ -146,6 +146,10 @@ echo ""
# MAIN LOGIC: Loop through each output for VERSION and attest to output in
# GUIX_SIGS_REPO as SIGNER, if attestation does not exist
for outdir in "${OUTDIRS[@]}"; do
+ if [ -e "${outdir}/SKIPATTEST.TAG" ]; then
+ echo "${outname}: SKIPPING: Output directory marked with SKIPATTEST.TAG file"
+ continue
+ fi
outname="$(out_name "$outdir")"
outsigdir="$(out_sig_dir "$outdir")"
if [ -e "$outsigdir" ]; then