-
-
Notifications
You must be signed in to change notification settings - Fork 14.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
certmgr: init at 1.6.1 #44406
certmgr: init at 1.6.1 #44406
Conversation
|
||
goPackagePath = "github.com/cloudflare/certmgr/"; | ||
|
||
nativeBuildInputs = [ ]; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can be removed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Of course. Though I already did that. Apparently not.. Removed now :)
9504238
to
813f64b
Compare
pkgs/top-level/all-packages.nix
Outdated
@@ -117,6 +117,8 @@ with pkgs; | |||
|
|||
cmark = callPackage ../development/libraries/cmark { }; | |||
|
|||
certmgr = callPackage ../tools/security/certmgr { }; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you move this to a more relevant section into all-packages.nix
? Maybe line 1700. (Not blaming you though, that file is a mess..)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks. Done now. Yeah, would have been slightly better if it was just a single big sorted list.
813f64b
to
5050074
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me then, runs fine as well, will merge in a bit if nobody else complains, thanks :)
Motivation for this change
Certmgr is a Cloudflare client intended for interacting with cfssl.
Based on declarative specification, it can request new, and monitor existing, x509 certificates on any host and renew them automatically when required.
Certmgr can be used interactively on the cmdline to query and manage certficates, or it can be run as a daemon that continuously watches selected certificates. I will follow up soon with a nixos module for configuring the certmgr-daemon in particular.
As agreed with @srhb, I've added both of us as package maintainers.
Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)