Recent searches
Search options
Short blog post on how to authenticate your NixOS deployments with comin: https://lewo.abesis.fr/posts/authenticate-nixos-deployments/
lewo.abesis.fr · Authenticate your NixOS deploymentscomin is a pull mode NixOS deployment tool: it polls Git repositories and deploys new commits. It can now verify these commits are signed, to exclude attacks on the remote Git repository.
To automate the deployment of your NixOS machines with comin, you only need to add 3 lines in your configuration. It is really easy to use because you don’t need to configure a CICD nor store secrets. However, it requires you to trust the remote Git repository. When the Git repository is compromised, the attacker controls what is deployed on your machines.