summary refs log tree commit diff
diff options
context:
space:
mode:
authorEmily Trau <me@angus.ws>2023-05-01 13:28:29 +1000
committerEmily Trau <me@angus.ws>2023-05-02 10:18:35 +1000
commitebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87 (patch)
tree6e615a43df22952bc3811703f8ed72c4ab38a597
parentf519f097e4d733de994ee09c4bba80b55b9321af (diff)
downloadnixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar.gz
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar.bz2
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar.lz
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar.xz
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.tar.zst
nixpkgs-ebbc6ea8b3053d7f72b3bf5f1f1c431cffc6ca87.zip
minimal-bootstrap.stage0-posix: assert hex0 result
-rw-r--r--pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/hex0.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/hex0.nix b/pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/hex0.nix
index 8b8bca9ac96..48b2932cfeb 100644
--- a/pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/hex0.nix
+++ b/pkgs/os-specific/linux/minimal-bootstrap/stage0-posix/hex0.nix
@@ -19,4 +19,9 @@ derivationWithMeta {
     maintainers = with maintainers; [ emilytrau ];
     platforms = [ "i686-linux" ];
   };
+
+  # Ensure the untrusted hex0-seed binary produces a known-good hex0
+  outputHashMode = "recursive";
+  outputHashAlgo = "sha256";
+  outputHash = "sha256-QU3RPGy51W7M2xnfFY1IqruKzusrSLU+L190ztN6JW8=";
 }