From mboxrd@z Thu Jan  1 00:00:00 1970
From: David Craven <david@craven.ch>
Subject: Re: Build machine sysadmin support
Date: Sun, 21 Aug 2016 16:34:00 +0200
Message-ID: <CAL1_im=giBEx9Ne_dDQGFNJswh7uTP+m5qDagjL1MYWSSbzemg@mail.gmail.com>
References: <87bn0pp58b.fsf@gnu.org>
	<CAL1_imkyi8C8RtUA6R7doBWvuvncMYTfBv5t0bt3LnYLRSfMig@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:51353)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bbTpA-0006Sr-UX
	for guix-devel@gnu.org; Sun, 21 Aug 2016 10:34:09 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bbTp6-00066j-5C
	for guix-devel@gnu.org; Sun, 21 Aug 2016 10:34:08 -0400
Received: from mail-yb0-x235.google.com ([2607:f8b0:4002:c09::235]:35296)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bbTp4-00066I-Uw
	for guix-devel@gnu.org; Sun, 21 Aug 2016 10:34:04 -0400
Received: by mail-yb0-x235.google.com with SMTP id z10so29806723ybh.2
	for <guix-devel@gnu.org>; Sun, 21 Aug 2016 07:34:01 -0700 (PDT)
In-Reply-To: <CAL1_imkyi8C8RtUA6R7doBWvuvncMYTfBv5t0bt3LnYLRSfMig@mail.gmail.com>
List-Id: "Development of GNU Guix and the GNU System distribution."
	<guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-devel/>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org
Sender: "Guix-devel" <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
To: guix-devel <guix-devel@gnu.org>

guix install probably needs support for handling local-file's. This is
what I added as a template to gnu/system/examples. Apart from easily
deploying build-machines, I think this is also useful for getting guix
build --system=3Darmhf-linux working.

;; GuixSD configuration file for the build machines.
;; Copyright =C2=A9 2016 Ludovic Court=C3=A8s <ludo@gnu.org>
;; Released under the GNU GPLv3 or any later version.

(use-modules (gnu system modules build-machines)
             (gnu system modules people)
             (guix))

(define %sysadmins
  (list (sysadmin (name "Alice")
                  (full-name "Bob's sister Alice")
                  (lsh-public-key (local-file
                                   (string-append (getenv "HOME")
                                                  "/.ssh/id_ed25519.pub")))=
)))

(define %authorized-guix-keys
  ;; List of authorized 'guix archive' keys.
  (list (local-file "../../../hydra.gnu.org.pub")
        (local-file "/etc/guix/signing-key.pub")))

;; The actual machine.
(build-machine-os "build-machine" "Europe/Paris" %sysadmins
                  #:authorized-guix-keys %authorized-guix-keys)