From 723fac48a69ac10164d38c6e97f107c49d670613 Mon Sep 17 00:00:00 2001 From: Jonas Nick Date: Tue, 15 Jan 2019 23:07:32 +0000 Subject: [PATCH] Disable the binaryCache by default --- configuration.nix | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/configuration.nix b/configuration.nix index 668a0bb..2dc38ac 100644 --- a/configuration.nix +++ b/configuration.nix @@ -30,13 +30,14 @@ vim ]; - # FIXME: Turn off the binary cache by setting binaryCaches to empty list. - # This means that it will take a while for all packages to be built but it - # prevents a compromised cache taking over your system. As a result, the next - # line should be uncommented in production systems. - # nix.binaryCaches = []; + # FIXME: Turn on the binary cache by commenting out the next line. When the + # binary cache is enabled you are retrieving builds from a trusted third + # party which can compromise your system. As a result, the cache should only + # be enabled to speed up deployment of test systems. + nix.binaryCaches = []; - # FIXME: Add custom options (like boot options, output of nixos-generate-config, etc.): + # FIXME: Add custom options (like boot options, output of + # nixos-generate-config, etc.): # This value determines the NixOS release with which your system is to be