From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id O37SA6yic2HMKAEAgWs5BA (envelope-from ) for ; Sat, 23 Oct 2021 07:50:36 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id gOhSOquic2GcfQAAbx9fmQ (envelope-from ) for ; Sat, 23 Oct 2021 05:50:35 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 70DD6137AD for ; Sat, 23 Oct 2021 07:50:35 +0200 (CEST) Received: from localhost ([::1]:35624 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1me9vO-0006kx-HV for larch@yhetil.org; Sat, 23 Oct 2021 01:50:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33396) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1me9vB-0006kn-Mr for guix-devel@gnu.org; Sat, 23 Oct 2021 01:50:22 -0400 Received: from mugam.systemreboot.net ([139.59.75.54]:44834) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1me9v6-0005uV-DX for guix-devel@gnu.org; Sat, 23 Oct 2021 01:50:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=d0t8UW5ZJ4iT/8Xzkzbph6V2Dn6WcoZQXgzTzJ4yWNU=; b=NFCxWc3DdUqY/EL+NE+UV2Iw+n uiR9ViWwwrIgn4sohf66zugMUnvGN73RGi80v+XCO+T6RzjP5Ey8MwbTzIVdHKPOQEmpYl6pEKfeo lPZ2LTc1vS4/sYm0kZNOU7cthR5hmzDKDoW0aGq03v0wBxjDvEtG2CX24YZgNV+zEwU1yyuFJMi2f 2ShSejafFS8cqx+2SDW0HkYCxQrKq+IU23CfrJhM9AeZGOmncTofl/UVfW7/x8U2etEfC9HiCY1mJ 5uqT29ja+gG2vG0Lt5F1v4d9z8BBEjas0XKfV14kozP8OyN+CPcdJ77mPWg3h7bqLv8cskCJcY47Y qZCOYm/w==; Received: from [192.168.2.1] (port=13766 helo=steel) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1me9uy-0002RH-5J; Sat, 23 Oct 2021 11:20:08 +0530 From: Arun Isaac To: zimoun , Tobias Geerinckx-Rice Subject: Re: Public guix offload server In-Reply-To: <86r1cdzf74.fsf@gmail.com> References: <864k9a2r1m.fsf@gmail.com> <878rynh0yq.fsf@systemreboot.net> <87cznz74l5.fsf@nckx> <864k9ag5k0.fsf@gmail.com> <87a6j272oz.fsf@nckx> <14fcfe6c31dab2128746730df72caba0@libre.brussels> <867de611ya.fsf@gmail.com> <87mtn256it.fsf@nckx> <86r1cdzf74.fsf@gmail.com> Date: Sat, 23 Oct 2021 11:19:54 +0530 Message-ID: <878ryk9tod.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: pass client-ip=139.59.75.54; envelope-from=arunisaac@systemreboot.net; helo=mugam.systemreboot.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1634968235; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=d0t8UW5ZJ4iT/8Xzkzbph6V2Dn6WcoZQXgzTzJ4yWNU=; b=OW1G4EwZeQ6hGGgMeVzjP3alR6qEI7U6LEAQRE863a+GNo0IrXbAgmSJBPNEjQHwpwhNGS DdIhESiJpETOrGycR+vlUKI2KkrYrRo+3T2v/pKPb8BcfDjJm+GKA9e0Q6S72FVwQT7hwV e8QqrP4/VGKm56mv0uiipW5UbzJ4B7xNM+FRwUEuCdP7xjuNzpWdprNHVoarQKBz2RB9mL 1pgPrQONzGTzJMDam52KbJDVt0kxy6evQkF6NpyUZawXdWR+0yx5+daV0GC+Mi41ADm66O /b37JG0V2KR8Y+Q7luNqP5x05GMgLgp6euGrmwn6r/kzp1DBR2iq2CcA/WYqAA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1634968235; a=rsa-sha256; cv=none; b=MLQE0LsBCPqqgH0vwq53r9rZmxT/ThFz0oukEVkAVKckBVuajXEImvYPT43tfu9GOUPn6N GtPzR4tTcgtj/GKuHacowIrd0id1RPH3L7TqYVVO2QSwDjgjhZoX48Sgserb9/Diy1Ij+R bWFX/XZ66uUwFlyVRoS/yoXaoXgeCLhcEfeJXhEdyQDGroVLdV/gcQFaiALQrEIs94fH2Z E4eo7yc5pAvLewvrhki9KNuebRZaznJAozZYmctAeK/pk2c4esrA1QEU0FBls61Lttc7I4 6dGVyO0SS3OTlZDw966x1isYGxJGNsSaQETc/oqtXSkhAAY8tq9LywzBcHEO2A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=NFCxWc3D; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.93 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=NFCxWc3D; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 70DD6137AD X-Spam-Score: -1.93 X-Migadu-Scanner: scn0.migadu.com X-TUID: tRecJhsZKbCb --=-=-= Content-Type: text/plain Hi zimoun, > Imagine another Cuirass instance where any committer could add [1] their > own branch. It would act as this minimal job submission API. > > 1: > > The questions are the authentication to this Cuirass instance and how > Cuirass deals with rebased branch (which would happen). I don't think we need Cuirass. We could just use the remote guix-daemon features that are already in Guix. $ export GUIX_DAEMON_SOCKET=ssh://charlie@sandbox.guix.gnu.org:22 $ guix build foo Then we just need to copy over the build outputs from the remote host. Maybe, `guix copy' could be used. With this method, we already have all the software that we need. Authentication is handled via ssh. And, there is no need for trust between users of the build server. Now, somebody just needs to set up the hardware! :-) Regards, Arun --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFPBAEBCAA5FiEEf3MDQ/Lwnzx3v3nTLiXui2GAK7MFAmFzooIbHGFydW5pc2Fh Y0BzeXN0ZW1yZWJvb3QubmV0AAoJEC4l7othgCuz124H/2mSeUycatxpls+lKKWd HFskE9Wb/paBB7orBj+Lu+1BblwJlNHQfEYBsuuebK1gSfNEhC9KsFKx6A0aNPod baggkwk5X3GO5wldGrnbqiual0Fgk6Qi6Iw4kEqGpzip4dBAwqYRNvfBaqvovHxN f2cLFXzhNKlhCMw5ukkmVeBliUsH43OjN2Y3aMxYNG4EQt7Hs3/l7FSiW46fHRyc j4MqECimJMeJ+g0hd7DjNHniWryUHNQ1M3a0iY3fiLWaBH9cs4cPIJu3HClM8wVP HehY7ZjVK2Cvx5YSsTtgUS7htf198niyQAGCh0Dj0vVvL5iKdiQ2ZpZwdboEpZn+ 4mE= =CsFS -----END PGP SIGNATURE----- --=-=-=--