geoffrey/dotfiles
geoffrey/dotfiles
1
0
Fork 0
Code Issues 7 Pull requests Releases Activity

password: Don't delete hashes immediately

Browse source
This commit is contained in:
Geoffrey Frogeye 2024-07-12 23:05:44 +02:00
parent f664b51c85
commit 2329d67d16
Signed by: geoffrey
GPG key ID: C72403E7F82E6AD8
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
os/password/default.nix
View file

@ -120,12 +120,14 @@ in
${lib.strings.concatLines (builtins.map syncPasswordStore passwords)} ${lib.strings.concatLines (builtins.map syncPasswordStore passwords)}
comm -23 <(sudo find ${passwordStoreDir} -type f | sort) <(echo ${lib.strings.escapeShellArg (lib.strings.concatLines allFilenames)} | sort) | while read -r file comm -23 <(sudo find ${passwordStoreDir} -type f -ctime +60 | sort) <(echo ${lib.strings.escapeShellArg (lib.strings.concatLines allFilenames)} | sort) | while read -r file
do do
echo Removing "$file" from password store echo Removing "$file" from password store
sudo rm "$file" sudo rm "$file"
done done
''; '';
# -ctime +60 is so it is possible to boot from previous nixpkgs without missing transform hashes
# TODO Find a better mechanism, maybe à la bootspec, or something compatible with cross-arch
})} $out/bin/ })} $out/bin/
''; '';
}; };