pkgs/os-specific/darwin/signing-utils/auto-sign-hook.sh


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

fixupOutputHooks+=('signDarwinBinariesIn $prefix')

# Uses signingUtils, see definition of autoSignDarwinBinariesHook in
# darwin-packages.nix

signDarwinBinariesIn() {
  local dir="$1"

  if [ ! -d "$dir" ]; then
    return 0
  fi

  if [ "${darwinDontCodeSign:-}" ]; then
    return 0
  fi

  while IFS= read -r -d $'\0' f; do
    signIfRequired "$f"
  done < <(find "$dir" -type f -print0)
}