Make this repository a authenticated Guix channel

In order to ease distribution of the various machine configurations defined within this
repository, make this repository an authenticated Guix channel.

* .guix-authorizations: Add a single authorized key to start
* .guix-channel: Set various channel details
* news.txt: Provide an initial news item
This commit is contained in:
Collin J. Doering 2024-03-18 19:04:48 -04:00
parent 6cf7f9a72e
commit 33eeb76c9b
Signed by: rekahsoft
GPG Key ID: 7B4DEB93212B3022
3 changed files with 39 additions and 0 deletions

11
.guix-authorizations Normal file
View File

@ -0,0 +1,11 @@
;; -*- mode: scheme; -*-
;; This is the list of OpenPGP keys currently authorized to sign commits in
;; this repository.
(authorizations
(version 0)
((;; primary: "F7BD DC6D BBE6 B16B 2C71 1A02 5FAB 9938 E05B FEC8"
"F8D5 46F3 AF37 EF53 D1B6 48BE 7B4D EB93 212B 3022"
(name "rekahsoft"))))

6
.guix-channel Normal file
View File

@ -0,0 +1,6 @@
;; -*- mode: scheme; -*-
(channel
(version 0)
(news-file "news.txt")
(url "https://git.rekahsoft.ca/rekahsoft/guix-north-america.git"))

22
news.txt Normal file
View File

@ -0,0 +1,22 @@
(channel-news
(version 0)
(entry (commit "6cf7f9a72eae0333705518ee865a72ea4b63399b")
(title (en "guix-north-america channel with authenticated updates"))
(body
(en "guix-north-america is now a channel (which primary is used as a means to distributes configuration).
This channel takes advantage of support for authenticated updates in @command{guix pull},
which protects you from attempts to tamper with this repository and ship malicious code
instead. To ensure you only receive genuine updates from this channel, you should update your
@file{~/.config/guix/channels.scm} to include the channel introduction:
@lisp
(channel
(name 'guix-north-america)
(url \"https://git.rekahsoft.ca/rekahsoft/guix-north-america\")
(INTRODUCTION
(make-channel-introduction
\"6cf7f9a72eae0333705518ee865a72ea4b63399b\"
(openpgp-fingerprint
\"F8D5 46F3 AF37 EF53 D1B6 48BE 7B4D EB93 212B 3022\"))))
@end lisp "))))