incus-vm: use extra-substituters/extra-trusted-public-keys for attic

Avoids duplicating cache.nixos.org which NixOS already sets as a default
substituter. Using extra-* variants appends to the NixOS defaults rather
than replacing them, keeping a single cache.nixos.org entry in nix.conf.
This commit is contained in:
Ben Potter 2026-04-24 23:08:18 +00:00
parent 478fb7806d
commit 60cb9d9bfc

View File

@ -98,14 +98,8 @@ resource "null_resource" "provision_nixos" {
# Attic binary cache on ThinkStation shared across all NixOS VMs. # Attic binary cache on ThinkStation shared across all NixOS VMs.
# Builds are fetched from here on cache hit; new builds are pushed via # Builds are fetched from here on cache hit; new builds are pushed via
# the post-build hook below. # the post-build hook below.
nix.settings.substituters = [ nix.settings.extra-substituters = [ "$ATTIC_URL/$ATTIC_CACHE" ];
"https://cache.nixos.org" nix.settings.extra-trusted-public-keys = [ "$ATTIC_PUBKEY" ];
"$ATTIC_URL/$ATTIC_CACHE"
];
nix.settings.trusted-public-keys = [
"cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
"$ATTIC_PUBKEY"
];
# Auto-push every build result to the Attic cache. # Auto-push every build result to the Attic cache.
nix.settings.post-build-hook = "/etc/nix/post-build-hook.sh"; nix.settings.post-build-hook = "/etc/nix/post-build-hook.sh";