Add secret resolver plumbing - #16339

Open

domenkozar wants to merge 10 commits into

NixOS:masterfrom

cachix:secret-resolver-interface

Commits on Aug 23, 2026

libstore: add an operation-scoped secret resolver

domenkozar
and
claude
committed
7170b4a
fetchers: pass secret resolution through FetchContext
domenkozar
committed
85a3a06
libstore: pass secret resolution through file transfers
domenkozar
committed
cfe1be3
libstore: pass secret resolution into builds
domenkozar
committed
1e65f32
libstore: retain secret contexts in opened stores
domenkozar
committed
a83d3bd
libstore: resolve netrc credentials per transfer

domenkozar
and
claude
committed
7b0341f
libstore: scope builtin:fetchurl netrc credentials to each fetch

domenkozar
and
claude
committed
211daf9
libstore: resolve build netrc credentials before forking

domenkozar
and
claude
committed
f636fb4
libstore: configure CA bundles per transfer

domenkozar
and
claude
committed
3ce7af5
libcmd: respect AutoCall for flake installables

domenkozar
and
claude
committed
9cf59cf