Commit 23a37837d8cf

Vincent Demeester <vincent@sbr.pm>
2026-09-10 14:40:19
test(nagoya): check builder key authorization
Validate the escaped forced-command form and compact access declaration so the dedicated Nagoya builder credential remains constrained. Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 0849c5b
Changed files (1)
imperative
nagoya
test-builder-key.sh
imperative/nagoya/test-builder-key.sh
@@ -6,6 +6,6 @@ repo_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
 helper="$repo_root/imperative/nagoya/authorize-aomi-builder.sh"
 
 [[ -x "$helper" ]]
-grep -q 'restrict,command="/nix/var/nix/profiles/default/bin/nix-daemon --stdio"' "$helper"
+grep -qF 'restrict,command=\"/nix/var/nix/profiles/default/bin/nix-daemon --stdio\"' "$helper"
 grep -q 'aomi-nagoya-builder' "$repo_root/globals.nix"
-grep -q 'nagoya = "trusted"' "$repo_root/globals.nix"
+grep -q 'access.vincent.nagoya = "trusted"' "$repo_root/globals.nix"