core/pkgs/by-name/da/darwin/packages/signing-utils/auto-sign-hook.sh
2024-05-13 11:34:52 -04:00

32 lines
587 B
Bash

postFixupHooks+=(signDarwinBinariesInAllOutputs)
# Uses signingUtils, see definition of autoSignDarwinBinariesHook in
# darwin-packages.nix
signDarwinBinariesIn() {
local dir="$1"
if [ ! -d "$dir" ]; then
return 0
fi
if [ "${darwinDontCodeSign:-}" ]; then
return 0
fi
echo "signing $dir"
while IFS= read -r -d $'\0' f; do
signIfRequired "$f"
done < <(find "$dir" -type f -print0)
}
# Apply fixup to each output.
signDarwinBinariesInAllOutputs() {
local output
for output in $(getAllOutputNames); do
signDarwinBinariesIn "${!output}"
done
}