GNU bug report logs - #52517
inconstency with offloading

Previous Next

Package: guix;

Reported by: zimoun <zimon.toutoune <at> gmail.com>

Date: Wed, 15 Dec 2021 17:04:02 UTC

Severity: normal

Done: Ludovic Courtès <ludo <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: zimoun <zimon.toutoune <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 52517 <at> debbugs.gnu.org
Subject: bug#52517: inconstency with offloading
Date: Mon, 03 Jan 2022 18:16:50 +0100
Hi,

On Mon, 03 Jan 2022 at 17:52, Ludovic Courtès <ludo <at> gnu.org> wrote:

> This is because guix-daemon spawns ‘guix offload’ as root.

Yes.  The issue is I cannot offload to a machine where I have an SSH
account and where Guix is installed if the sysadmin does not configure
correctly this /root/.ssh/.


> diff --git a/doc/guix.texi b/doc/guix.texi
> index 43549da388..9c1f30e83f 100644
> --- a/doc/guix.texi
> +++ b/doc/guix.texi
> @@ -1250,9 +1250,10 @@ The @file{/etc/guix/machines.scm} file typically looks like this:
>          (systems (list "aarch64-linux"))
>          (host-key "ssh-rsa AAAAB3Nza <at> dots{}")
>          (user "alice")
> -        (private-key
> -         (string-append (getenv "HOME")
> -                        "/.ssh/identity-for-guix"))))
> +
> +        ;; Remember 'guix offload' is spawned by
> +        ;; 'guix-daemon' as root.
> +        (private-key "/root/.ssh/identity-for-guix")))

This patch LGTM.  At least, it could save time for people configuring
offload. :-)

I am fine to close the issue but, as I said, the fix seems to be able to
offload without root access but just an SSH access.


Cheers,
simon





This bug report was last modified 3 years and 225 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.