headscale/cmd
Kristoffer Dalby e470774f6a cmd/vendorhash: track vendor SRI in flakehashes.json
Move the headscale vendorHash out of flake.nix into a content-
addressed flakehashes.json maintained by a small Go tool. The
schema and goModFingerprint algorithm mirror upstream tailscale's
tool/updateflakes so a future shared library extraction is trivial.

vendorhash check verifies flakehashes.json against the current
go.mod/go.sum. Hot path is a sha256 over those two files, so
re-runs without input change are essentially free; only an actual
fingerprint drift triggers go mod vendor + nardump.SRI.

vendorhash update recomputes both fields and rewrites the JSON.
The nix-vendor-sri devShell shim now wraps it.
2026-05-11 08:46:12 +01:00
..
dev cmd/dev: validate --port fits the derived-port range 2026-04-17 16:31:49 +01:00
headscale cmd/headscale/cli: validate users in policy check 2026-05-09 11:28:12 +01:00
hi docs: expand cmd/hi and integration READMEs 2026-04-10 12:30:07 +01:00
mapresponses all: fix golangci-lint issues (#3064) 2026-02-06 21:45:32 +01:00
vendorhash cmd/vendorhash: track vendor SRI in flakehashes.json 2026-05-11 08:46:12 +01:00