From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: Advice about GuixSD on Serveraptor? Date: Wed, 22 Mar 2017 21:01:06 +0000 Message-ID: <20170322210106.f6z7vwavsna3qfg4@abyayala> References: <20170209183609.5rztohnqhsleifll@wasp> <20170213214717.GA11352@jasmine> <20170313003252.GA12094@jasmine> <20170321180638.GA3027@jasmine> <87mvcenzvw.fsf@dustycloud.org> <20170321204620.GA30143@jasmine> <20170321210609.rmugh5l26eqicrhd@abyayala> <20170322171538.GA6011@jasmine> <20170322192023.ij2mzykimne7lfii@abyayala> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51738) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cqnKa-00085K-Ep for guix-devel@gnu.org; Wed, 22 Mar 2017 16:58:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cqnKX-0002iv-CW for guix-devel@gnu.org; Wed, 22 Mar 2017 16:58:08 -0400 Received: from fragranza.investici.org ([178.175.144.26]:58536) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cqnKX-0002id-1K for guix-devel@gnu.org; Wed, 22 Mar 2017 16:58:05 -0400 Content-Disposition: inline In-Reply-To: <20170322192023.ij2mzykimne7lfii@abyayala> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari , guix-devel@gnu.org ng0 transcribed 1.3K bytes: > Leo Famulari transcribed 2.0K bytes: > > On Tue, Mar 21, 2017 at 09:06:09PM +0000, ng0 wrote: > > > IN-Berlin wants a raw image (they have read our documentation). > > > The way their system works is that you sent > > > them your ssh pubkey, they initialize a basic Debian system depending on > > > the size you chose, and you can login once you get the hostname etc. > > > They have an out-of-band consoleserver where the ssh key is placed > > > aswell for the machine. > > > I don't work with this non-profit organization, but having a way to > > > define ssh pubkeys in the system config would be super useful for this. > > > Right now I'm about to create my own system and just sent it to them as > > > soon as I feel up to it. > > > If they could simply create the system in their infrastructure, that > > > would be an incredible speedup and reproducible. > > > I don't know much about the out of band consoleserver, I have to ask > > > if that's somehow relevant or if it simply needs some initrd settings to > > > expose it to the server. > > > > Interesting! I'll probably take a look at this when I got some free > > time. > > I'll write an email to IN-Berlin asking about the consoleserver this > week. > If it's nothing special, we could provide this bare image, and people > could download it as the GuixSD with ssh + whatever is needed for it to > work out in server context as a start. > I just realized the last sentence is not good. Correction: If IN-Berlin uses (or needs) nothing special for the consoleserver to make use of the virtual servers within IN-Berlin infrastructure, I think it would be best if we (as Guix) could provide an extended bare image for servers which would include ssh-daemon on default port with password login enabled, where the password is not empty. That's a workaround I can imagine to be generic enough for all use cases. For the one of IN-Berlin and maybe similar hosters who use ssh pubkeys, it would be great to document for them how to recreate this image in easy steps and insert the clients ssh pubkey for the root account (or an named user) on the system. What do you think about this?