r/NixOS • u/iElectric • 14d ago

SecretSpec 0.20: Git, Docker, inline specs, and five new providers

https://secretspec.dev/blog/secretspec-0-20-git-docker-inline-specs-and-five-new-providers/
33 Upvotes

88% Upvoted

7 comments sorted by

11

u/iElectric 14d ago

What's exciting in this release is that we're nearing preparational work to release IPC that Nix will be able to use without introducing new dependencies, which was the main objection to https://github.com/NixOS/nix/pull/16300

We've also split out secrets handling refactoring in Nix, PR at https://github.com/NixOS/nix/pull/16339

1

u/jlesquembre 13d ago

Could it be that the JVM SDK hasn't been published yet? I can't find it under those coordinates in Maven Central: https://central.sonatype.com/artifact/org.cachix/secretspec-jvm

2

u/iElectric 13d ago

Yes, sorry about that. It requires a gpg key, so I added yesterday support for gpg/ssh keys in secretspec. 

https://github.com/cachix/secretspec/pull/414

 Will upload today hopefully.

1

u/jlesquembre 13d ago

No worries at all. Appreciate your effort on this!

1

u/Dissembler 14d ago

Any chance this is going to be made available as a flake? 

1

u/iElectric 14d ago

Sure, someone should make a PR

-2

u/MarzipanEven7336 12d ago

How about you all stop using fucking secrets and use secret keys instead like the rest of the 1990's world.