Subject: Re: bug#52517: inconstency with offloading

From: zimoun <[email-masked]>
Date: Mon, 03 Jan 2022 18:16:50 +0100

Hi,

On Mon, 03 Jan 2022 at 17:52, Ludovic Courtès <[email-masked]> wrote:

> This is because guix-daemon spawns ‘guix offload’ as root.

Yes.  The issue is I cannot offload to a machine where I have an SSH
account and where Guix is installed if the sysadmin does not configure
correctly this /root/.ssh/.

> diff --git a/doc/guix.texi b/doc/guix.texi
> index 43549da388..9c1f30e83f 100644
> --- a/doc/guix.texi
> +++ b/doc/guix.texi
> @@ -1250,9 +1250,10 @@ The @file{/etc/guix/machines.scm} file typically looks like this:
>          (systems (list "aarch64-linux"))
>          (host-key "ssh-rsa AAAAB3Nza@dots{}")
>          (user "alice")
> -        (private-key
> -         (string-append (getenv "HOME")
> -                        "/.ssh/identity-for-guix"))))
> +
> +        ;; Remember 'guix offload' is spawned by
> +        ;; 'guix-daemon' as root.
> +        (private-key "/root/.ssh/identity-for-guix")))

This patch LGTM.  At least, it could save time for people configuring
offload. :-)

I am fine to close the issue but, as I said, the fix seems to be able to
offload without root access but just an SSH access.

Cheers,
simon