From unknown Sat Sep 13 23:19:34 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#52517 <52517@debbugs.gnu.org> To: bug#52517 <52517@debbugs.gnu.org> Subject: Status: inconstency with offloading Reply-To: bug#52517 <52517@debbugs.gnu.org> Date: Sun, 14 Sep 2025 06:19:34 +0000 retitle 52517 inconstency with offloading reassign 52517 guix submitter 52517 zimoun severity 52517 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 15 12:03:09 2021 Received: (at submit) by debbugs.gnu.org; 15 Dec 2021 17:03:09 +0000 Received: from localhost ([127.0.0.1]:33582 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mxXgK-0003Ku-TO for submit@debbugs.gnu.org; Wed, 15 Dec 2021 12:03:09 -0500 Received: from lists.gnu.org ([209.51.188.17]:43320) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mxXgJ-0003Kn-Ne for submit@debbugs.gnu.org; Wed, 15 Dec 2021 12:03:08 -0500 Received: from eggs.gnu.org ([209.51.188.92]:38242) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mxXgF-00017c-CC for bug-guix@gnu.org; Wed, 15 Dec 2021 12:03:05 -0500 Received: from [2a00:1450:4864:20::435] (port=33596 helo=mail-wr1-x435.google.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mxXgD-0004KZ-Pp for bug-guix@gnu.org; Wed, 15 Dec 2021 12:03:03 -0500 Received: by mail-wr1-x435.google.com with SMTP id j9so7206263wrc.0 for ; Wed, 15 Dec 2021 09:02:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=SwJyJ6c6msxYpbfLbXFyAhzEfSfMMTysW7neI91Zcbk=; b=YXkqa8hEIqQjdLqdspU99NPBgPFay4Au4eQAj4o2/kT5/LSeDGRn4numSkrqxUSNgh G8rse0JVW0lplpbU3KRI1bfcGFRsTG7SmxNVmtKa5h6XtieLMuzmnMoZbMUOqPMgYa4y YJ6F996BOuatd/9fQH5gVAsBtB/5m4Eo7a1nRfs1OMg1FtMfag4BhnzYeJP2+STUNlWv wMkHEeedLfXGG3q1tKLRUsOQnrQY9qpgLpd8GGBGYz9If1ppax+yVlQCQhjgDvW3i3Kw 4R7kvt6jSaDRzerVRTI8dDCPWcWWDBuA5T69tFONNKDioUs50wnEn9mjTiCvUe+0N8z8 jxzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=SwJyJ6c6msxYpbfLbXFyAhzEfSfMMTysW7neI91Zcbk=; b=iNbr0Y5+RYmLly6LkljNhv526JAYkfB/3W9nGlOyesN29CMQf3x4khePAmSeMb6zag Hp5njwyUiBYyvEL+zz1ZW3y5+h6uN9lE1AYKHHOWt4UOd5/cAH39WJedPBcHjMZZvKLG aEPKIqvJXq9y6Nlg9P4dxxJaIML9833/aSwaRdkiifIP+IvBYa/dDw5+RCtbxWghrhg5 1Lr9zgkntMbajJgoWR1H83XvYUVlcoXNaMfkcKvsftT+WqU7cS1hRmeWKa6NFRQ13o77 TU9CMS1PvQfGl70Xnumad6qpdv1UDA8r4BBvUGqMjTgp9AV9B1LqB/3rI7Ngc9wGhEsu WBTw== X-Gm-Message-State: AOAM533CrY3JZimGUkgMbIYRQWDjTeuF7+Pe+vnBVaSg51MtffALAoCX 2C1Oe5yNrqzJ0pjNyspaF4Q1xWBgfJ0= X-Google-Smtp-Source: ABdhPJyj8suSEJ3GefeXYC5uFjdVYpPiErQsqehPTqCiEKzjxanhgMkIeefB+SShpadgb26errQQSQ== X-Received: by 2002:a05:6000:16c4:: with SMTP id h4mr5255919wrf.312.1639587777134; Wed, 15 Dec 2021 09:02:57 -0800 (PST) Received: from pfiuh02 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id u10sm3455235wrs.99.2021.12.15.09.02.55 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Dec 2021 09:02:56 -0800 (PST) From: zimoun To: bug-guix@gnu.org Subject: inconstency with offloading Date: Wed, 15 Dec 2021 18:02:52 +0100 Message-ID: <87y24lol6r.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a00:1450:4864:20::435 (failed) Received-SPF: pass client-ip=2a00:1450:4864:20::435; envelope-from=zimon.toutoune@gmail.com; helo=mail-wr1-x435.google.com X-Spam_score_int: -12 X-Spam_score: -1.3 X-Spam_bar: - X-Spam_report: (-1.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hi, The manual provides [1] the example: --8<---------------cut here---------------start------------->8--- (build-machine (name "armeight.example.org") (systems (list "aarch64-linux")) (host-key "ssh-rsa AAAAB3Nza=E2=80=A6") (user "alice") (private-key (string-append (getenv "HOME") "/.ssh/identity-for-guix"))) --8<---------------cut here---------------end--------------->8--- but what is not clear is 'getenv' from who. Concretly, adding 'pk' it reads: --8<---------------cut here---------------start------------->8--- $ guix offload test ;;; ("/home/simon") guix offload: testing 2 build machines defined in '/etc/guix/machines.scm'.= .. --8<---------------cut here---------------end--------------->8--- however, when really building with offload: --8<---------------cut here---------------start------------->8--- $ guix build -L /tmp/mine r-cipr The following derivation will be built: /gnu/store/mzixy5hhx79xx33k03acaasml87c0knc-r-cipr-0.1.0-1.4b01bb8.drv ;;; ("/root") process 6815 acquired build slot '/var/guix/offload/x.x.x.x:22/0' process 6815 acquired build slot '/var/guix/offload/x.x.x.x:22/0' normalized load on machine 'x.x.x.x' is 0.00 --8<---------------cut here---------------end--------------->8--- "guix offload tes" does the correct thing, not "guix build". Cheers, simon 1: From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 15 23:09:45 2021 Received: (at 52517) by debbugs.gnu.org; 16 Dec 2021 04:09:45 +0000 Received: from localhost ([127.0.0.1]:34197 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mxi5R-0002KS-2X for submit@debbugs.gnu.org; Wed, 15 Dec 2021 23:09:45 -0500 Received: from mail-qk1-f175.google.com ([209.85.222.175]:35792) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mxi5P-0002KC-WA for 52517@debbugs.gnu.org; Wed, 15 Dec 2021 23:09:44 -0500 Received: by mail-qk1-f175.google.com with SMTP id m192so22214011qke.2 for <52517@debbugs.gnu.org>; Wed, 15 Dec 2021 20:09:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=p5/BQZLlBPD0CEULDTpkGjbK3ikW34KQHdq2moiRIKs=; b=XRItgs+jbND6qr/UIIAE2M0ML7PDA8crxFM1m0OQTzztBYhIiSKOsbbBi/rSPfB5fA AGspqChMotzuL6x6UjTSeTWnoTGmlQhlM75kpEkts3GAl953LeVvoR7XGLC6HPPgF8ja KJa3xAjR6hblBn34HBhXD49uAZ2DvBqOXaaOtPNkHJijGkmOvZZRMlMD1QTS0osHnv3g nsYfpGA/Srj0vK0/mtpMiiv93sJmzYf2Mz3HBUDu4ggU9T7Knn8qre9v3ah0et9B+V/c SdC2XJ7zl7gLm6XubTYs+2TZDDzwZLhY6uk/hf1vx5oXXTe6jt/YbA6aux+1J/q6MnEU JIUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=p5/BQZLlBPD0CEULDTpkGjbK3ikW34KQHdq2moiRIKs=; b=H7JoZWi0s7Qmb0Xls2UoWX3aC0meeBe4/Qt63C3gRnVA2ukI7053EAPA/l6x1H4ENl 1OIPL5RBay4IEMCx38TtJOGbb2raCUpjbzNUU66Snf+EXpfZdUnJtqbP8f6QDLFWYk1R 2hBqxn8niB06T36k/HtVY50MfqwOMkKCdvMN1Zhy7USJ83wNz94o2UPEg8L0pCe/rBZI E6b7K3HPy0Qi4bN+58eT3wE24hx/NEimshPo7NKxKquWrVwms4sRl3DYw4Y+qmMvcUA9 G6E9HNhE7Gx/zpONHPeLON4xyKEY134BmHfa4+pTY/x57Oad8iIJTTXHxalUk+PG+uYb 9ZKQ== X-Gm-Message-State: AOAM530Pi2XqhMhVl0b9rI/539Uk6mvX4Du8TShDKaw8vpAQntAfl4DG kEqmOFIrOR5DuzjVOm36hTia/dn9xxY= X-Google-Smtp-Source: ABdhPJzH+y5Q7XtNH/sHWCYLIBP3BT1kh2fU9yhmhQe6T+bqTWNvlwVRgihrB8TFeSpTF0HQcs7q4w== X-Received: by 2002:a05:620a:4416:: with SMTP id v22mr10946726qkp.164.1639627778114; Wed, 15 Dec 2021 20:09:38 -0800 (PST) Received: from hurd (dsl-10-146-110.b2b2c.ca. [72.10.146.110]) by smtp.gmail.com with ESMTPSA id d11sm3007517qtj.4.2021.12.15.20.09.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Dec 2021 20:09:37 -0800 (PST) From: Maxim Cournoyer To: zimoun Subject: Re: bug#52517: inconstency with offloading References: <87y24lol6r.fsf@gmail.com> Date: Wed, 15 Dec 2021 23:09:35 -0500 In-Reply-To: <87y24lol6r.fsf@gmail.com> (zimoun's message of "Wed, 15 Dec 2021 18:02:52 +0100") Message-ID: <87ilvp8a2o.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 52517 Cc: 52517@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello Simon! zimoun writes: > Hi, > > The manual provides [1] the example: > > (build-machine > (name "armeight.example.org") > (systems (list "aarch64-linux")) > (host-key "ssh-rsa AAAAB3Nza=E2=80=A6") > (user "alice") > (private-key > (string-append (getenv "HOME") > "/.ssh/identity-for-guix"))) > > > but what is not clear is 'getenv' from who. Concretly, adding 'pk' it > reads: > > $ guix offload test > > ;;; ("/home/simon") > guix offload: testing 2 build machines defined in '/etc/guix/machines.scm= '... > > > however, when really building with offload: > > $ guix build -L /tmp/mine r-cipr > The following derivation will be built: > /gnu/store/mzixy5hhx79xx33k03acaasml87c0knc-r-cipr-0.1.0-1.4b01bb8.drv > > ;;; ("/root") Good observation; a similar issue I had reported is https://issues.guix.gnu.org/39366. Maxim From debbugs-submit-bounces@debbugs.gnu.org Mon Jan 03 11:52:59 2022 Received: (at 52517) by debbugs.gnu.org; 3 Jan 2022 16:52:59 +0000 Received: from localhost ([127.0.0.1]:36030 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4QZv-000178-Gf for submit@debbugs.gnu.org; Mon, 03 Jan 2022 11:52:59 -0500 Received: from hera.aquilenet.fr ([185.233.100.1]:33904) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4QZs-00016r-Le for 52517@debbugs.gnu.org; Mon, 03 Jan 2022 11:52:58 -0500 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id E775116B; Mon, 3 Jan 2022 17:52:48 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HwCnUJ7IERKj; Mon, 3 Jan 2022 17:52:48 +0100 (CET) Received: from ribbon (91-160-117-201.subs.proxad.net [91.160.117.201]) by hera.aquilenet.fr (Postfix) with ESMTPSA id B6C68120; Mon, 3 Jan 2022 17:52:47 +0100 (CET) From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: zimoun Subject: Re: bug#52517: inconstency with offloading References: <87y24lol6r.fsf@gmail.com> Date: Mon, 03 Jan 2022 17:52:47 +0100 In-Reply-To: <87y24lol6r.fsf@gmail.com> (zimoun's message of "Wed, 15 Dec 2021 18:02:52 +0100") Message-ID: <87sfu4g3s0.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spamd-Bar: / Authentication-Results: hera.aquilenet.fr; none X-Rspamd-Server: hera X-Rspamd-Queue-Id: E775116B X-Spamd-Result: default: False [0.53 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_ENVRCPT(0.00)[gmail.com]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[multipart/mixed,text/plain,text/x-patch]; RCPT_COUNT_TWO(0.00)[2]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; R_MIXED_CHARSET(0.63)[subject]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 52517 Cc: 52517@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, zimoun skribis: > The manual provides [1] the example: > > (build-machine > (name "armeight.example.org") > (systems (list "aarch64-linux")) > (host-key "ssh-rsa AAAAB3Nza=E2=80=A6") > (user "alice") > (private-key > (string-append (getenv "HOME") > "/.ssh/identity-for-guix"))) > > > but what is not clear is 'getenv' from who. Concretly, adding 'pk' it > reads: > > $ guix offload test > > ;;; ("/home/simon") > guix offload: testing 2 build machines defined in '/etc/guix/machines.scm= '... > > > however, when really building with offload: > > $ guix build -L /tmp/mine r-cipr > The following derivation will be built: > /gnu/store/mzixy5hhx79xx33k03acaasml87c0knc-r-cipr-0.1.0-1.4b01bb8.drv > > ;;; ("/root") This is because guix-daemon spawns =E2=80=98guix offload=E2=80=99 as root. But yeah, I agree that the example contributes to the confusion. How about changing the manual as shown below? Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch Content-Disposition: inline diff --git a/doc/guix.texi b/doc/guix.texi index 43549da388..9c1f30e83f 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -1250,9 +1250,10 @@ The @file{/etc/guix/machines.scm} file typically looks like this: (systems (list "aarch64-linux")) (host-key "ssh-rsa AAAAB3Nza@dots{}") (user "alice") - (private-key - (string-append (getenv "HOME") - "/.ssh/identity-for-guix")))) + + ;; Remember 'guix offload' is spawned by + ;; 'guix-daemon' as root. + (private-key "/root/.ssh/identity-for-guix"))) @end lisp @noindent --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Mon Jan 03 12:17:39 2022 Received: (at 52517) by debbugs.gnu.org; 3 Jan 2022 17:17:39 +0000 Received: from localhost ([127.0.0.1]:36110 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4Qxn-0001qQ-6d for submit@debbugs.gnu.org; Mon, 03 Jan 2022 12:17:39 -0500 Received: from mail-wr1-f46.google.com ([209.85.221.46]:42717) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4Qxl-0001q9-G9 for 52517@debbugs.gnu.org; Mon, 03 Jan 2022 12:17:37 -0500 Received: by mail-wr1-f46.google.com with SMTP id w20so62133548wra.9 for <52517@debbugs.gnu.org>; Mon, 03 Jan 2022 09:17:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:in-reply-to:references:date:message-id :mime-version:content-transfer-encoding; bh=Ki0ghlGAJekdm0OIWv4DOuwD82wiHIPAAFnLNUQYoFw=; b=FLereiVCywPGoBVjFYkl7+2aTl1ETEl+0EbpwEAa7c4SdH+tPcnAMQeq8eFZwzqrjg kEDk1Xyh+lHo6B8XEfrZD5jkKdasFdAGlMSQAbxZsvArpktaYOPgyBrzoGCGTrY0o3eP 8C4rflkpGJChTN2RHXlobd2KsA89Zja7aP8EFmyOFBoAaryV9bAWgB81atwHkKwbWwC+ 6FHBx7qpeVWJrsSktwCtzhtK5y58GfLmWo0+i6bI6/NIHdOEbihWZq3H/bAaciBF4zI2 B4pZKO5iO0jAgmhOSbj3x6N4k+DWbTFh1Kg2BB4E0q7e1V0utoMN+SHHu46RB3e80Weu T91Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=Ki0ghlGAJekdm0OIWv4DOuwD82wiHIPAAFnLNUQYoFw=; b=DwwSJuIWMsKJaQ9na8kJnXJamEmWOFpHEQ7n+MLwNKNSxR7AdKb9xde2Gxu+RI8Hxk 7f8IZ+KrTHWSYE+/kD27orrK5EZUA7AdTuUU+dzfmVf4jB3vHSl+d35rZ8LwfJuQPPn5 ES58cDjGT6VUrv5oYMk23OKjTM/U2ci7/2IFeTjL+m2Zv6Ac9hlVX4Nh1K9zHKMqztF4 THy3ghFXb75GWbY2AjMRpDAolq2gNjvg8r7uor3xVzNz5dj85N++zpZsCtsuRhUijAIR 4itziaqkeWhwnRWMnhp+NdkJJjQOigFlshXyZlODm1E/MwOz8Xh4ZAJYJMK8IK7vw3Rm TWPQ== X-Gm-Message-State: AOAM532JfV7GY/50d3pcZq+y5Tv5iqQyKpAJQ4YqvkNLeIxxmiDb6+NL 2LY46izecn0qjrt9aTT5je80lAhI3RM= X-Google-Smtp-Source: ABdhPJyhKTa+TmSMv4MTtigPluIcdPN1SlVvSwTucOUaNPqJbfTHly4fZpSWc/y11UsM9nCBkCZ34w== X-Received: by 2002:adf:9d8c:: with SMTP id p12mr38852214wre.622.1641230251633; Mon, 03 Jan 2022 09:17:31 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id w25sm37011186wmk.20.2022.01.03.09.17.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 03 Jan 2022 09:17:31 -0800 (PST) From: zimoun To: Ludovic =?utf-8?Q?Court=C3=A8s?= Subject: Re: bug#52517: inconstency with offloading In-Reply-To: <87sfu4g3s0.fsf@gnu.org> References: <87y24lol6r.fsf@gmail.com> <87sfu4g3s0.fsf@gnu.org> Date: Mon, 03 Jan 2022 18:16:50 +0100 Message-ID: <86czl8viwt.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 52517 Cc: 52517@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, On Mon, 03 Jan 2022 at 17:52, Ludovic Court=C3=A8s wrote: > This is because guix-daemon spawns =E2=80=98guix offload=E2=80=99 as root. Yes. The issue is I cannot offload to a machine where I have an SSH account and where Guix is installed if the sysadmin does not configure correctly this /root/.ssh/. > diff --git a/doc/guix.texi b/doc/guix.texi > index 43549da388..9c1f30e83f 100644 > --- a/doc/guix.texi > +++ b/doc/guix.texi > @@ -1250,9 +1250,10 @@ The @file{/etc/guix/machines.scm} file typically l= ooks like this: > (systems (list "aarch64-linux")) > (host-key "ssh-rsa AAAAB3Nza@dots{}") > (user "alice") > - (private-key > - (string-append (getenv "HOME") > - "/.ssh/identity-for-guix")))) > + > + ;; Remember 'guix offload' is spawned by > + ;; 'guix-daemon' as root. > + (private-key "/root/.ssh/identity-for-guix"))) This patch LGTM. At least, it could save time for people configuring offload. :-) I am fine to close the issue but, as I said, the fix seems to be able to offload without root access but just an SSH access. Cheers, simon From debbugs-submit-bounces@debbugs.gnu.org Mon Jan 03 13:30:48 2022 Received: (at 52517-done) by debbugs.gnu.org; 3 Jan 2022 18:30:48 +0000 Received: from localhost ([127.0.0.1]:36179 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4S6a-0003rF-08 for submit@debbugs.gnu.org; Mon, 03 Jan 2022 13:30:48 -0500 Received: from hera.aquilenet.fr ([185.233.100.1]:35812) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4S6Y-0003r3-L7 for 52517-done@debbugs.gnu.org; Mon, 03 Jan 2022 13:30:47 -0500 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id E88223E5; Mon, 3 Jan 2022 19:30:39 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3n2IVHl04IOz; Mon, 3 Jan 2022 19:30:39 +0100 (CET) Received: from ribbon (91-160-117-201.subs.proxad.net [91.160.117.201]) by hera.aquilenet.fr (Postfix) with ESMTPSA id 89D282C3; Mon, 3 Jan 2022 19:30:38 +0100 (CET) From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: zimoun Subject: Re: bug#52517: inconstency with offloading References: <87y24lol6r.fsf@gmail.com> <87sfu4g3s0.fsf@gnu.org> <86czl8viwt.fsf@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 14 =?utf-8?Q?Niv=C3=B4se?= an 230 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Mon, 03 Jan 2022 19:30:37 +0100 In-Reply-To: <86czl8viwt.fsf@gmail.com> (zimoun's message of "Mon, 03 Jan 2022 18:16:50 +0100") Message-ID: <87k0fgfz8y.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: / Authentication-Results: hera.aquilenet.fr; none X-Rspamd-Server: hera X-Rspamd-Queue-Id: E88223E5 X-Spamd-Result: default: False [0.53 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_ENVRCPT(0.00)[gmail.com]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_TWO(0.00)[2]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; R_MIXED_CHARSET(0.63)[subject]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 52517-done Cc: 52517-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Hi, zimoun skribis: > On Mon, 03 Jan 2022 at 17:52, Ludovic Court=C3=A8s wrote: > >> This is because guix-daemon spawns =E2=80=98guix offload=E2=80=99 as roo= t. > > Yes. The issue is I cannot offload to a machine where I have an SSH > account and where Guix is installed if the sysadmin does not configure > correctly this /root/.ssh/. True. That=E2=80=99s admittedly not as flexible as it could be. Interestingly, GUIX_DAEMON_SOCKET=3Dssh://=E2=80=A6 almost achieves that. Perhaps we could implement =E2=80=9Cuser-level offloading=E2=80=9D, probabl= y in addition to system-wide offloading? Food for thought=E2=80=A6 >> diff --git a/doc/guix.texi b/doc/guix.texi >> index 43549da388..9c1f30e83f 100644 >> --- a/doc/guix.texi >> +++ b/doc/guix.texi >> @@ -1250,9 +1250,10 @@ The @file{/etc/guix/machines.scm} file typically = looks like this: >> (systems (list "aarch64-linux")) >> (host-key "ssh-rsa AAAAB3Nza@dots{}") >> (user "alice") >> - (private-key >> - (string-append (getenv "HOME") >> - "/.ssh/identity-for-guix")))) >> + >> + ;; Remember 'guix offload' is spawned by >> + ;; 'guix-daemon' as root. >> + (private-key "/root/.ssh/identity-for-guix"))) > > This patch LGTM. At least, it could save time for people configuring > offload. :-) Alright, committing. > I am fine to close the issue but, as I said, the fix seems to be able to > offload without root access but just an SSH access. Yes, we can discuss that separately. A simple design would be to have clients install a =E2=80=9Cbuild handler= =E2=80=9D; when the handler is called, it selects a machine, open a remote store connection, copies missing inputs, starts the build, retrieves outputs=E2=80=94all that from the client. Of course admins still have to authorize keys both ways, but at least that gives more flexibility. (We could also have a model where keys are authorized just one-way.) Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Mon Jan 03 14:29:40 2022 Received: (at 52517-done) by debbugs.gnu.org; 3 Jan 2022 19:29:41 +0000 Received: from localhost ([127.0.0.1]:36255 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4T1Y-0005T8-Nd for submit@debbugs.gnu.org; Mon, 03 Jan 2022 14:29:40 -0500 Received: from mail-wr1-f44.google.com ([209.85.221.44]:33757) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1n4T1U-0005Sr-8a for 52517-done@debbugs.gnu.org; Mon, 03 Jan 2022 14:29:39 -0500 Received: by mail-wr1-f44.google.com with SMTP id d9so71802572wrb.0 for <52517-done@debbugs.gnu.org>; Mon, 03 Jan 2022 11:29:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:in-reply-to:references:date:message-id :mime-version:content-transfer-encoding; bh=M5/YGHtWdj8SgR+l6tARgK4YBlZu60EpCNa3JVn6Tq4=; b=gnzHQz1IxmSrm3CkkhxVrNMcd/CAw73yalQAFkaF7GSNUixbV8dTnVm4Bi7oixAeDg 1Ue0z3noSVjS8aNBE/NNojy4swZVaVmOFtAmo56boRL7ogD484fnyMe8q2wOsfAyHxup UNoHrOxCg+nmNps8L8spCj0i54RRfKTqvIwVNRxR/njPdyDB5aPt9XUAdiydOYGVDIwj WtvpYpd9NYI3OXOcoNi+E7gl0/vjKtif/6BGccXC9sVQqSC+QWiCU+0PJrjhn7NfKsui 6eYHNURAeo4+OsApN6o2ABOW4/vQ/dkVl8cvBbksOesO+OGtqZw8IJ4JZozC5/49osq6 iOrw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=M5/YGHtWdj8SgR+l6tARgK4YBlZu60EpCNa3JVn6Tq4=; b=O9VFpc2HlEvSga3v+EJ6sxd5Q0S9unZX2PbX3B/OB1fddx1PPS/idZUk1RVQJtNm7n 5TobHANraWeW51cyU2tp2781Q5/j3MlWYqK8Ig3kXai4GydTpE9SeGXJLXkiGmvByLFW lpCSYteTdnYNYvZXNYQRp+lB5l4EhbrWtsNKE+XlU1UfI1zDTPFI5mzpp6DkkqCfCiti b3SLgLkI6TsFRzPBWxvSw6mfSfBdh6FQfl+2AMzWSDnRuZWSKVaoSYF3MemvYeYkyTJD dR8OGpGOOd8PlhA+EYTwIRd9PkmrHll0lIn5Ty4rjbBQUgGHhhSqWuy6fIe6EPnwEQ9R uckA== X-Gm-Message-State: AOAM533ui9S+9Cspg4Ud4K2NV9hNDl7b/TRQnyxFfvg6RsGIxP5/WZql 4LkueCqIaQ4yzYN7BF7hb1kg1yrrXTQ= X-Google-Smtp-Source: ABdhPJxkuioaSoL3LUg6YJgYgPhofSp6mFKdu3xvAzgqHv9OMYKGJdc56mc9sXxgEYvhfuMRYCrMYA== X-Received: by 2002:adf:cc8d:: with SMTP id p13mr38121940wrj.688.1641238170287; Mon, 03 Jan 2022 11:29:30 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id bk17sm5398120wrb.105.2022.01.03.11.29.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 03 Jan 2022 11:29:29 -0800 (PST) From: zimoun To: Ludovic =?utf-8?Q?Court=C3=A8s?= Subject: Re: bug#52517: inconstency with offloading In-Reply-To: <87k0fgfz8y.fsf@gnu.org> References: <87y24lol6r.fsf@gmail.com> <87sfu4g3s0.fsf@gnu.org> <86czl8viwt.fsf@gmail.com> <87k0fgfz8y.fsf@gnu.org> Date: Mon, 03 Jan 2022 20:19:32 +0100 Message-ID: <86o84stynv.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 52517-done Cc: 52517-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Ludo, On Mon, 03 Jan 2022 at 19:30, Ludovic Court=C3=A8s wrote: > Interestingly, GUIX_DAEMON_SOCKET=3Dssh://=E2=80=A6 almost achieves that. Thanks for the hint. > Alright, committing. Cool! Thanks. >> I am fine to close the issue but, as I said, the fix seems to be able to >> offload without root access but just an SSH access. > > Yes, we can discuss that separately. Yes=E2=80=A6 > A simple design would be to have clients install a =E2=80=9Cbuild handler= =E2=80=9D; when > the handler is called, it selects a machine, open a remote store > connection, copies missing inputs, starts the build, retrieves > outputs=E2=80=94all that from the client. Of course admins still have to > authorize keys both ways, but at least that gives more flexibility. (We > could also have a model where keys are authorized just one-way.) =E2=80=A6and it is not easy. And somehow it is similar as the issue of =C2= =ABPublic guix offload server=C2=BB discussed [1] recently (Oct. 2021). 1: Cheers, simon From unknown Sat Sep 13 23:19:34 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Tue, 01 Feb 2022 12:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator