Skip to content
Snippets Groups Projects
  • Eelco Dolstra's avatar
    6024dc1d
    Support SRI hashes · 6024dc1d
    Eelco Dolstra authored
    SRI hashes (https://www.w3.org/TR/SRI/) combine the hash algorithm and
    a base-64 hash. This allows more concise and standard hash
    specifications. For example, instead of
    
      import <nix/fetchurl.nl> {
        url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz;
        sha256 = "5d22dad058d5c800d65a115f919da22938c50dd6ba98c5e3a183172d149840a4";
      };
    
    you can write
    
      import <nix/fetchurl.nl> {
        url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz;
        hash = "sha256-XSLa0FjVyADWWhFfkZ2iKTjFDda6mMXjoYMXLRSYQKQ=";
      };
    
    In fixed-output derivations, the outputHashAlgo is no longer mandatory
    if outputHash specifies the hash (either as an SRI or in the old
    "<type>:<hash>" format).
    
    'nix hash-{file,path}' now print hashes in SRI format by default. I
    also reverted them to use SHA-256 by default because that's what we're
    using most of the time in Nixpkgs.
    
    Suggested by @zimbatm.
    6024dc1d
    History
    Support SRI hashes
    Eelco Dolstra authored
    SRI hashes (https://www.w3.org/TR/SRI/) combine the hash algorithm and
    a base-64 hash. This allows more concise and standard hash
    specifications. For example, instead of
    
      import <nix/fetchurl.nl> {
        url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz;
        sha256 = "5d22dad058d5c800d65a115f919da22938c50dd6ba98c5e3a183172d149840a4";
      };
    
    you can write
    
      import <nix/fetchurl.nl> {
        url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz;
        hash = "sha256-XSLa0FjVyADWWhFfkZ2iKTjFDda6mMXjoYMXLRSYQKQ=";
      };
    
    In fixed-output derivations, the outputHashAlgo is no longer mandatory
    if outputHash specifies the hash (either as an SRI or in the old
    "<type>:<hash>" format).
    
    'nix hash-{file,path}' now print hashes in SRI format by default. I
    also reverted them to use SHA-256 by default because that's what we're
    using most of the time in Nixpkgs.
    
    Suggested by @zimbatm.