AD ASTRA

Vega

The Nix cache you don't have to trust.

Point Nix at Vega Install GitHub App

Optional: the GitHub App adds the commit check for GitHub builds.

Vega is a Nix binary cache at the edge. It mirrors cache.nixos.org and serves builds promoted to the shared tier only when independent builders agree on the same output. Reproducibility you can verify, not just trust.

Use the cache

extra-substituters = https://vega-cache.dev
extra-trusted-public-keys = vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=
vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=
/etc/nix/nix.conf
experimental-features = nix-command flakes
max-jobs = auto
extra-substituters = https://vega-cache.dev
extra-trusted-public-keys = vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=
trusted-users = root @wheel

Verify a build

nix run github:Ad-Astra-Computing/vega-agent#vega -- verify <hash>

Mirrored Nixpkgs paths keep their cache.nixos.org-1 signature (already trusted by Nix). The key above signs only Vega-built outputs.