Warning: This program is experimental and its interface is subject to change.
nix store sign - sign store paths
nix store sign [option...] installables...
File containing the secret signing key.
Common evaluation options:
Pass the value expr as the argument name to Nix functions.
Pass the string string as the argument name to Nix functions.
The Nix store to use for evaluations.
Allow access to mutable paths and repositories.
Add path to the list of locations used to look up
Override the flake registries, redirecting original-ref to resolved-ref.
Common flake-related options:
Commit changes to the flake's lock file.
Use the inputs of the specified flake as registry entries.
Don't allow lookups in the flake registries. This option is deprecated; use
Do not allow any updates to the flake's lock file.
Do not write the flake's newly generated lock file.
Override a specific flake input (e.g.
dwarffs/nixpkgs). This implies
Recreate the flake's lock file from scratch.
Update a specific flake input (ignoring its previous entry in the lock file).
Options that change the interpretation of installables:
Apply the operation to every store path.
Operate on the store derivation rather than its outputs.
Interpret installables as attribute paths relative to the Nix expression expr.
Interpret installables as attribute paths relative to the Nix expression stored in file. If file is the character -, then a Nix expression will be read from standard input.
Apply operation to closure of the specified paths.