From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) Subject: bug#20381: Interacting with a remote daemon Date: Tue, 25 Apr 2017 12:24:54 +0200 Message-ID: <8737cwdbt5.fsf@gnu.org> References: <87a8y3q84k.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48152) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d2xfa-00058F-MW for bug-guix@gnu.org; Tue, 25 Apr 2017 06:26:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d2xfX-0003dy-CX for bug-guix@gnu.org; Tue, 25 Apr 2017 06:26:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:40658) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d2xfX-0003dm-8v for bug-guix@gnu.org; Tue, 25 Apr 2017 06:26:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1d2xfX-0001bA-33 for bug-guix@gnu.org; Tue, 25 Apr 2017 06:26:03 -0400 Sender: "Debbugs-submit" Resent-To: bug-guix@gnu.org Resent-Message-ID: In-Reply-To: <87a8y3q84k.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Mon, 20 Apr 2015 14:47:23 +0200") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 20381-done@debbugs.gnu.org Cc: Ricardo Wurmus Hello! ludo@gnu.org (Ludovic Court=C3=A8s) skribis: > In , Ricardo notes: > > At some point I think it would make sense to enhance Guix such that > RPCs can be made over SSH, so that explicit logging on to a management > machine is no longer necessary. > > We should see exactly how much support is needed. > > Is =E2=80=98socat=E2=80=99 enough, as suggested in > ? > That means there would be no authentication, but maybe that=E2=80=99s acc= eptable > in a cluster that is isolated on its own LAN anyway. > > Option #2 would be to augment (guix store) and guix-daemon so that there > is built-in support for TCP sockets, which would be slightly more > convenient. > > Option #3 would be to make (guix store) SSH-capable, with Guile-SSH. > But it sounds like SSH would incur relatively high latency when > connecting to the daemon. I think this is fixed by this series of commits: 285f63e80 * store: Support 'ssh://' URIs in 'GUIX_DAEMON_SOCKET'. e53783372 * ssh: Decompose 'connect-to-remote-daemon'. 615c5298f * ssh: Move 'open-ssh-session' to (guix ssh). ba97e454b * offload: Avoid using '_' as a 'match' pattern. 3dff90ce3 * store: Add support for remote connections via 'guix://' URIs. 3b5cd17a9 * store: Add 'system-error-to-connection-error' macro. 1397b422e * store: 'GUIX_DAEMON_SOCKET' can now be a URI. with the caveats given here: https://lists.gnu.org/archive/html/guix-devel/2017-04/msg00487.html Closing! Ludo=E2=80=99.