refactor(tvix): point SSL_CERT_FILE to /dev/null

reqwest wants to be able to read a file of trust roots when constructed,
but as it doesn't actually do any HTTPS connections inside the nix
build, an empty list of trust roots is totally sufficient.

Thankfully /dev/null provides such a file.

Change-Id: I9bd1619b2c9f8ff2a6640d2ac410d4de5b20c2ea
Reviewed-on: https://cl.tvl.fyi/c/depot/+/11961
Autosubmit: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
Reviewed-by: aspen <root@gws.fyi>
This commit is contained in:
Florian Klink 2024-07-07 17:16:36 +03:00 committed by clbot
parent 89d204d295
commit d17c3d96b6
5 changed files with 12 additions and 12 deletions

View file

@ -53,7 +53,7 @@ let
buildCommand = ''
touch $out
# Ensure we can construct http clients.
export SSL_CERT_FILE="${pkgs.cacert.out}/etc/ssl/certs/ca-bundle.crt"
export SSL_CERT_FILE=/dev/null
${preStart}