From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 4APaCnmMTGUpKAAAauVa8A:P1 (envelope-from ) for ; Thu, 09 Nov 2023 08:38:33 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 4APaCnmMTGUpKAAAauVa8A (envelope-from ) for ; Thu, 09 Nov 2023 08:38:33 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D18A2211F6 for ; Thu, 9 Nov 2023 08:38:32 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=SmYMexD1; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1699515512; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=iXePO7iJCN2lKZljAfv3spiGUPrKzve411brgGVWbNU=; b=Y13k6dV48hkG6gR4pGu1SitnEQV5AoMtBUI+sXiJLHZ9hROyqtJMVUgBqZQ8JPLapmMzHP /M30b/93rF5eq/2mUPl7570Se62/O4dLry/e97PJm6Ldi7yuPsIulNHcYEZkH+bbUY8fZf 4TRlCvDmiCUu8AmmCcQhYS8AqHEd3ZdmoaaXX/gaXbSWiZUCgmlVNq7EidKpRuH+5HXd22 iijxM3SA4UHPXx+nzh20mhOtG1atqP/MwI4k0U4VNC8v5xueaOL/KeYaxMVlQdN+pEomRR uRgTFkq2joAb/CNnGikPsDagQEhdmsWN2P5zk6Hx0D3kVdFcA57Efw9Ah0ZLNQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=SmYMexD1; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1699515512; a=rsa-sha256; cv=none; b=DfoqsBGekxy8tFZ7ZeagLFVubzkpPzxILy9u1Z9JuVXDLkXe4guUAh9ZL4dgqgWXn5eN5r FFMeZ9iaRG3v/qwjc4xmjcTAh67oyY0S8wceSZBOLOtG3hnJpMwMK6pQsF94yPn3xK5r8f rp87CjaiXgfho13YYT5y7lxI1sYBDIiK8ksEDPNjxGDbXVcJwUmoH8QCe5yKLilAMPfQ7X SyP294oDSbdMIwa2jMHr7tliqRGmafV5xG1DsvQxRjT6ra+kZH6w4jbLpIBpDsCCC9K7wA h8YVFxTG1XzNxYiqYMC3XnV1j4yhtwGjYFhHNY+f4m/ai26nRCxfMmhi9yES5w== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1r0zcB-0004jZ-Qw; Thu, 09 Nov 2023 02:38:11 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r0zc9-0004im-RJ for guix-devel@gnu.org; Thu, 09 Nov 2023 02:38:09 -0500 Received: from mail-lf1-x132.google.com ([2a00:1450:4864:20::132]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r0zc7-0007Jd-Vj for guix-devel@gnu.org; Thu, 09 Nov 2023 02:38:09 -0500 Received: by mail-lf1-x132.google.com with SMTP id 2adb3069b0e04-5098e423ba2so556006e87.2 for ; Wed, 08 Nov 2023 23:38:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1699515486; x=1700120286; darn=gnu.org; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender:from:to :cc:subject:date:message-id:reply-to; bh=iXePO7iJCN2lKZljAfv3spiGUPrKzve411brgGVWbNU=; b=SmYMexD1HQLcam00ONqeXv0abm/JkCEclgmGmagFmfRe44NAHbJVi43QNQmCc/HQhC kls9o2X220UuUrYjvX8qM4j0sAkOKk2YM1sCsO25nHQ6D2NROSvA8wBxx6lUL0cwSnXz 3Bf/O8jEitjXKt4bC/3AzxkSi8GTi3XhwFpdr4YCWe+mnVhRXHvK/EfMpkFbdVTyafhh ahWosIcfuXsksXZQwUj283v+mD/hTYPEyOqD4CWGwqZdI8ArX1Y71bT7BXqWOnF5YldS RZuqDhRpc4YyaqSVSk9uJTUuU5dQU0X1TLMitInxpZ8E9Fc6A+7f/zkDuZSSSb3q0hhS igmA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699515486; x=1700120286; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=iXePO7iJCN2lKZljAfv3spiGUPrKzve411brgGVWbNU=; b=S6jxSV2UIGxBNOgsfuPtHWQfcTn1FJ/GQpbmySwXUZV8d+Plllt0/dPu0UkzuyTIJ2 Ds9ghmT+t7ZXAhhsooRpkGmJMdymDERD12MMPTj93elQ0NWnpFiqe0ds2HFZ55P947Ey oAugYy3/nAFA8KnFxVe/rQjhH8F49xaP2y3gOxTM4TJHVTEB2svDzXdFQQT1MoT2bVNf QvYb9OMLsLDolq5vKpwV6w8PHUU2dZ/DpWhBuVX23auiWpVyaW0QQQ0RhC2pnhbw1BzI qv7EZvfoKe+uw6UohwTtbgvjRl7cX1w+qiqEL8d89NpGhVhUZtojnhxgG9w30hFQAvZd 7Dqw== X-Gm-Message-State: AOJu0Yx+rA2lfUEU6sRFQpTrQjsCHvnqeMc53o7ps/NmO9Jv6/LpNdZY FsLrM2tJq6e63+rbkkrwurU= X-Google-Smtp-Source: AGHT+IET/n4p/4pldGEBqPnr7Mu4PDYQy23ooNi56qfXoiTa9N0yQjUuGKQy4Qc9NPj00twAIYdRLw== X-Received: by 2002:a05:6512:282c:b0:507:a1df:1408 with SMTP id cf44-20020a056512282c00b00507a1df1408mr832170lfb.55.1699515486039; Wed, 08 Nov 2023 23:38:06 -0800 (PST) Received: from localhost ([2a02:ed3:910:f600:f823:ecb4:394c:b4a3]) by smtp.gmail.com with ESMTPSA id x4-20020adfdd84000000b0032fb0e2087asm6772133wrl.82.2023.11.08.23.38.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 08 Nov 2023 23:38:05 -0800 (PST) Date: Thu, 9 Nov 2023 09:38:04 +0200 From: Efraim Flashner To: Maxim Cournoyer Cc: Felix Lechner , Ricardo Wurmus , guix-devel@gnu.org Subject: Re: Better support remote deployment Message-ID: Mail-Followup-To: Maxim Cournoyer , Felix Lechner , Ricardo Wurmus , guix-devel@gnu.org References: <87sf5pu06o.fsf@elephly.net> <87v8adidqp.fsf@gmail.com> <87zfzp2vph.fsf@elephly.net> <87fs1hhu1v.fsf@gmail.com> <874jhx9de3.fsf@lease-up.com> <87fs1ggvlt.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="1+U2bjW6rmpJpGtr" Content-Disposition: inline In-Reply-To: <87fs1ggvlt.fsf@gmail.com> X-PGP-Key-ID: 0x41AAE7DCCA3D8351 X-PGP-Key: https://flashner.co.il/~efraim/efraim_flashner.asc X-PGP-Fingerprint: A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Received-SPF: pass client-ip=2a00:1450:4864:20::132; envelope-from=efraim.flashner@gmail.com; helo=mail-lf1-x132.google.com X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -0.71 X-Spam-Score: -0.71 X-Migadu-Queue-Id: D18A2211F6 X-Migadu-Scanner: mx10.migadu.com X-TUID: uQW94YBpCAgC --1+U2bjW6rmpJpGtr Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 08, 2023 at 09:36:46AM -0500, Maxim Cournoyer wrote: > Hello, >=20 > Felix Lechner writes: >=20 > > Hi, > > > > On Tue, Nov 07 2023, Maxim Cournoyer wrote: > > > >> Then your suggestion to extend 'guix package' to be able to > >> install a profile from a store profile sounds useful, or perhaps a new > >> 'guix deploy-profile' (or a better name / sub-command?) that would > >> automate the copy and installation in one step. > > > > We have a lot of sub-commands already. Could 'guix deploy' instead be > > fed something other than a 'machine' record? >=20 > Perhaps too much of an overload of that command; not sure. >=20 > > How about a 'remote-user-profile'? >=20 > 'guix package' is already the command we use to create profiles; maybe > it could accept a '--remote' argument to operate on a remote machine? > Or is this not what 'GUIX_DAEMON_SOCKET=3Dssh://your-target guix package > -m manifest.scm' can already accomplish? :-) Currently there's no ssh connection caching, so using GUIX_DAEMON_SOCKET can be quite slow, I normally allow 5-10 minutes for a profile. That works best when you can't use guix copy to send derivations over. The profile effectively already exists, it doesn't need to be computed on each machine. It does seem more like deploy: take this profile, send it to that machine, and activate it there. `guix deploy` already takes a file, the file could have a profile (or home config?) and a location for the profile. And a user. --=20 Efraim Flashner =D7=A8=D7=A0=D7=A9=D7=9C=D7=A4 = =D7=9D=D7=99=D7=A8=D7=A4=D7=90 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --1+U2bjW6rmpJpGtr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAmVMjFkACgkQQarn3Mo9 g1FwXw/8DWSjuLN2d0oFi88RsOCVTAQD/JVF/CgRmGjxB3BHliDTJgOhhCoeCfnB FUup/7+tX9Cqkn5xZq41p9fxpzBJgL+ewR1/n0zKcgj85KsbF+JkB8Y6VR3njWcp XWcYCib4kPo8blSE4Vb8G5ajxa9CzpyQxsFxJtG75n9xAst0DZlVNQGZkkjVjUj+ Rm1cj0aGKp9BWS8FzErgmBipqR5kNQR26G+p9fCIf0h9wGvvbdSgKG4D52lH4f8x 8xxvNyX9LQI+2T+laeG9nNSIXQ7Xh8v+vm2bdG2UjeOc0Kb+8gqwXNzWr/yglMur zQhFduRIFeJg8nbj/5FMvB/mxRvAuQlS8y37zFbPIcaLi3rxzztSp+jx0Q+xwC/R lj+VEa0eowXqVjxHanNU63EGOZKQioScNwnUTvL/N/QMZhlRgBN1fmPvTODTKbzF 9vRE8KGf2hiXvrZKsh9dLXPaFqyXSIEIO022TR9b0AdWYmJcI1ClP9/xxBl4zaSU 9qyx0fE0iBGP9G1+1umRlXxEiIoMLB75fGWZl+RTjk2eI7K70mitZRos9FvBy2iu 7filHtmo+DRVYJb7Ymqe5LngpLaeLBP0tEIn6sUP4wkx0Dnt20CxI9pmdkIIdMeN zAOXDrEkYj/GrS+s+e/TbzdTXBYnia4gic0O0P5lpGJ1qVQjAoQ= =AFLi -----END PGP SIGNATURE----- --1+U2bjW6rmpJpGtr--