pkgs/os-specific/darwin/signing-utils/auto-sign-hook.sh

   1 postFixupHooks+=(signDarwinBinariesInAllOutputs)
   2
   3 # Uses signingUtils, see definition of autoSignDarwinBinariesHook in
   4 # darwin-packages.nix
   5
   6 signDarwinBinariesIn() {
   7   local dir="$1"
   8
   9   if [ ! -d "$dir" ]; then
  10     return 0
  11   fi
  12
  13   if [ "${darwinDontCodeSign:-}" ]; then
  14     return 0
  15   fi
  16
  17   echo "signing $dir"
  18
  19   while IFS= read -r -d $'\0' f; do
  20     signIfRequired "$f"
  21   done < <(find "$dir" -type f -print0)
  22 }
  23
  24 # Apply fixup to each output.
  25 signDarwinBinariesInAllOutputs() {
  26   local output
  27
  28   for output in $(getAllOutputNames); do
  29      signDarwinBinariesIn "${!output}"
  30   done
  31 }