From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id EFXwMZ90LGc7RAAAe85BDQ:P1 (envelope-from ) for ; Thu, 07 Nov 2024 08:04:48 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id EFXwMZ90LGc7RAAAe85BDQ (envelope-from ) for ; Thu, 07 Nov 2024 09:04:47 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=simendsjo.me header.s=fm3 header.b=A76HRNsk; dkim=fail ("body hash did not verify") header.d=messagingengine.com header.s=fm3 header.b="f2rl/prK"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=simendsjo.me (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1730966687; a=rsa-sha256; cv=none; b=GeylcbcJAEAkPqVhn2OVwBMitlfJI4lv3nq0PPjR7ahQknEqdrTc4xd2RY2qzQy0Aw5iRF xc9dnPpmRzfkAyMb6Jd6IsAyRoSGnp+DP58BzFWUorXc3GzwUC84f8qzlfmQ4SvXKSpT3M /zgQhpLVe0j7cJgrVv8qOhpFNRB9ZEbBpr39+w4D6oD9393chl1j81JGodWap19KbfKgOD lgVQhOCyzsUv4A06uoPXgv6CLww51/q41wdNFR5HLwZW85XkVmGLUESHfGFTiIj51ZyZzd JHSeUjyK3nLt0g55KFLcVSllBfSW7Dm4GA0ikq/uwl/bHLSb4tFjOSVy1cRpmA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=simendsjo.me header.s=fm3 header.b=A76HRNsk; dkim=fail ("body hash did not verify") header.d=messagingengine.com header.s=fm3 header.b="f2rl/prK"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=simendsjo.me (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1730966687; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=2Nx12QQdCv5K2LqUNNKu7AwTS4rTNv1//fJ7OBWpYNo=; b=EatcG8XkZTKX9jikBu8wCX3+LLF8UIg8eGKAtokqpMrlRIcCXrJMP7h3Vi/8K8CnydPNS1 1rCHcRifFT6Yg2t2MStrd3AobZYqscMKnUsi9OLiznUkQhVcSZbHtvCJGvocjQc1DA5PBE L2KIF23TdVFo5DvA3WI9u9+dobR+eZsCOPrjM6RS0dStSJPjG0g93dMQ/AeASM+1mKCDkC PTMxyFrD69b75qm8fSzS+V3IBG+CsRsDdAx5DOK9LJJBfx//GzsITUyVN1pi4l/HzP3qM5 AvFftFJwnhPQ2Rp+/o4ha9ak+3uPO/QDTQFAGLKt6n8HZUORovdVqz66gy4b7w== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6EBEA82777 for ; Thu, 07 Nov 2024 09:04:47 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t8xV0-0001tf-Cx; Thu, 07 Nov 2024 03:04:14 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t8xUx-0001tT-AU for help-guix@gnu.org; Thu, 07 Nov 2024 03:04:12 -0500 Received: from fhigh-a7-smtp.messagingengine.com ([103.168.172.158]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t8xUv-00021m-Di for help-guix@gnu.org; Thu, 07 Nov 2024 03:04:11 -0500 Received: from phl-compute-11.internal (phl-compute-11.phl.internal [10.202.2.51]) by mailfhigh.phl.internal (Postfix) with ESMTP id 054621140198; Thu, 7 Nov 2024 03:04:08 -0500 (EST) Received: from phl-imap-01 ([10.202.2.91]) by phl-compute-11.internal (MEProxy); Thu, 07 Nov 2024 03:04:08 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=simendsjo.me; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm3; t=1730966648; x=1731053048; bh=nQYzqVEZ+U lJ7u9SUGaRyztvDcyKyP+HYCH8FDJsosw=; b=A76HRNskBJ7RLAbXnXH23QPSNO UfQmpcrsm7JjD5c6YXLnM+RO9i20w5JoyseVmyKVnLxM5e4HMJj7GuP0gZncqBed BowImMAKfzHE+Y4/fFHyFUkvYxbC3OHCs9akEA6x7jib6aBKuBwyR8yuBNLvUnM8 Ctth1AVjwynwhifVNdJ8ZPOcr5S9pprGwlkoKkMXXU39qIYas6DkGsENjvRSm2AS qRP33hpF878uhRu9CSLse0Q8M3vjnb2BlNIjYaf6N9CHV6fJdZYkrN60sdUv7NlM MagQYYBEyod4w62+lQAiUyq8BSBo0u2XLTZ9pSKv/n5QvdWH0V16R4rrnPTA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1730966648; x=1731053048; bh=nQYzqVEZ+UlJ7u9SUGaRyztvDcyKyP+HYCH 8FDJsosw=; b=f2rl/prK2G3Kjij8NFs+YX1V6K+S6709k842nx4//BvcCKz7GQZ XApmyveskYjJGW8zvTTuk8QJpj/4/4AiAB88vAFl+GIDOyZ8Eu5mwn8MIOOfqFFY p04YnhQ+BLoXhcX1+xlaSTUnz5TP9hiwiwy7RsW8gwUvicBaMlcXlqyGUgl/vR/A Uo12SkgptDtKOsjNCgrR8tjJgIikEVYKw958UvD4geNHs9KDOg7imjR0qvfP5L5W TNLUo1OEEhUuhpxWEAbyqH0T2I0TdhEPUuw/ZEW7o0jF8k3SP7j3d5fZWfD3+rXY FZ/MC4jfZzl5eXTKXH6lWYAGepTlUoHf2mQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefuddrtdefgdduudeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefoggffhf fvvefkjghfufgtsegrtderreertdejnecuhfhrohhmpefuihhmvghnucfgnhgushhjppcu oegtohhnthgrtghtsehsihhmvghnughsjhhordhmvgeqnecuggftrfgrthhtvghrnhephf dvffduffefveegkeduhfduueegvedvjeelieegteeikeffudegheekleffhfdvnecuvehl uhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheptghonhhtrggtth esshhimhgvnhgushhjohdrmhgvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhp ohhuthdprhgtphhtthhopehhvghlphdqghhuihigsehgnhhurdhorhhgpdhrtghpthhtoh epmiesfiholhhfshguvghnrdgtii X-ME-Proxy: Feedback-ID: i08f14972:Fastmail Received: by mailuser.phl.internal (Postfix, from userid 501) id 61A363360079; Thu, 7 Nov 2024 03:04:07 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface MIME-Version: 1.0 Date: Thu, 07 Nov 2024 09:03:46 +0100 From: =?UTF-8?Q?Simen_Endsj=C3=B8?= To: "Tomas Volf" <~@wolfsden.cz> Cc: help-guix@gnu.org Message-Id: <0f2459aa-dea2-45ad-b888-149cf0f5b46d@app.fastmail.com> In-Reply-To: <87bjyrc49c.fsf@wolfsden.cz> References: <87plndi8s2.fsf@simendsjo.me> <87y120csy2.fsf@wolfsden.cz> <6b274737-a2ac-4e60-af99-9d23aec71f90@app.fastmail.com> <87bjyrc49c.fsf@wolfsden.cz> Subject: Re: Not sure how to add an offload server Received-SPF: pass client-ip=103.168.172.158; envelope-from=contact@simendsjo.me; helo=fhigh-a7-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: 5.62 X-Spam-Score: 5.62 X-Migadu-Queue-Id: 6EBEA82777 X-Migadu-Scanner: mx10.migadu.com X-TUID: 2hitzlASTfge Strange! I found out the error was passed by the offload server, so it w= as complaining that it didn't trust my laptop! I added my laptop to authori= zed keys on the server, and then it works! `guix archive --authorize` compla= ins that it should be set in the system configuration for Guix SD though, so I di= d that. But /usr/local is a mystery. I tried deleting it, but a reconfigure adde= d back /usr/local/guix/acl. And `guix offload` commands still uses (the now mis= sing file) /etc/local/guix/machines.scm by default. A difference between our configurations is that I'm modifying build-mach= ines in the original guix-configuration using modify-services. But that really s= houldn't make any difference, should it? On Thu, Nov 7, 2024, at 00:49, Tomas Volf wrote: > Simen Endsj=C3=B8 writes: >=20 > > I don't understand how /etc/guix and /usr/local/etc/guix fits togeth= er. > > /usr/local/etc/guix/acl does not contain the public key, but it exis= ts > > and symlinks to a store item. >=20 > They should not fit together, /usr/local does not exist at all on my > GuixSD system. >=20 > > Could someone link me to a working offload setup? >=20 > These two blocks are all I need. >=20 > --8<---------------cut here---------------start------------->8--- > (define %build-machines > (list #~(build-machine > (name "some-server") > (systems (list "x86_64-linux" "i686-linux" "aarch64-linux")) > (host-key "some-host-key") > (user "build-offload") > (parallel-builds 4) > (overload-threshold #f) > (private-key "/some/key")))) > --8<---------------cut here---------------end--------------->8--- >=20 > --8<---------------cut here---------------start------------->8--- > (simple-service 'offload guix-service-type > (guix-extension > (build-machines %build-machines))) > --8<---------------cut here---------------end--------------->8--- >=20 > (Well, I also needed to authorized the keys using `guix archive', as t= he > manual instructs. And create the `build-offload' user on the server > with allowed login by ssh key.) >=20 > T. >=20 > --=20 > There are only two hard things in Computer Science: > cache invalidation, naming things and off-by-one errors. >=20 >=20 > *Attachments:* > =E2=80=A2 signature.asc