From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id UIT6If/kSGGgWQEAgWs5BA (envelope-from ) for ; Mon, 20 Sep 2021 21:46:07 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id UPqrHf/kSGFyEwAA1q6Kng (envelope-from ) for ; Mon, 20 Sep 2021 19:46:07 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D43F313872 for ; Mon, 20 Sep 2021 21:46:06 +0200 (CEST) Received: from localhost ([::1]:45402 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mSPEr-0003bT-Tg for larch@yhetil.org; Mon, 20 Sep 2021 15:46:05 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44856) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mSPEA-0003ah-KW for help-guix@gnu.org; Mon, 20 Sep 2021 15:45:24 -0400 Received: from sender4-op-o11.zoho.com ([136.143.188.11]:17139) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mSPE7-0004wN-Dn for help-guix@gnu.org; Mon, 20 Sep 2021 15:45:22 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1632167112; cv=none; d=zohomail.com; s=zohoarc; b=LNm+qHdgFbbRWpYyV7ExJefHNXROeTKvAbC8ppbQCAL6o9hbaGwHjqW2uLWHacl1Vzzpo/5seEjihEgfXOne2e3VSOB8gLssXelE4EKMQd57F8USj9MQVqo2UXyFbBQtyEsf4cfSykQ1P8HxikeMvEw1PTZOP2UCfrZwNwJIY5Q= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1632167112; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To; bh=D1//cfwcwyg7A7H7iQaWdVv7LYAOGBbybkgNS23SQJo=; b=NCz7lBbV7lt04wUZP3+FN33+IwUTb70G2L5u2HxP8HGdYxvenKYURVMtAKpeQxvmCZBRiAIOIAC46YfJisgbOEesZSzNCBpApAPjVYGzcMTj2bY/rTYISjVsIo4LbCoRmPFs4YitIA8jegfp5JAV9rmPQHYs1I8WLwgnh0t0y5Q= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=beaver-labs.com; spf=pass smtp.mailfrom=edk@beaver-labs.com; dmarc=pass header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1632167112; s=zoho; d=beaver-labs.com; i=edk@beaver-labs.com; h=References:From:To:Cc:Subject:Date:In-reply-to:Message-ID:MIME-Version:Content-Type; bh=D1//cfwcwyg7A7H7iQaWdVv7LYAOGBbybkgNS23SQJo=; b=Qjb01rBmiPy/8jpmBStkDXJnCatpEgUeNOcsPWTMDI0MM2eH9+SfVQjC3BFJTBA2 90Zi90ZYY/FxDPDrT7k87PXfLXSnSyzq5uvo+0XtUVk13/4TkfGhGGdeHo9P85NQkbo TGBtdeLaGR7xcrOkaMqNqcpjyXwCzodjdPB+XFtw= Received: from schwarzy (lfbn-idf3-1-600-168.w86-252.abo.wanadoo.fr [86.252.177.168]) by mx.zohomail.com with SMTPS id 1632167109350408.7531672375395; Mon, 20 Sep 2021 12:45:09 -0700 (PDT) References: <87mto75cb6.fsf@dustycloud.org> User-agent: mu4e 1.6.5; emacs 27.2 From: "'edk@beaver-labs.com'" To: Christine Lemmer-Webber Subject: Re: Ad-hoc offloading to a server Date: Mon, 20 Sep 2021 21:38:32 +0200 In-reply-to: <87mto75cb6.fsf@dustycloud.org> Message-ID: <87lf3rowv8.fsf@rdklein.fr> MIME-Version: 1.0 Content-Type: text/plain X-ZohoMailClient: External Received-SPF: pass client-ip=136.143.188.11; envelope-from=edk@beaver-labs.com; helo=sender4-op-o11.zoho.com X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1632167166; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=D1//cfwcwyg7A7H7iQaWdVv7LYAOGBbybkgNS23SQJo=; b=JTbxoYSmJKnY5eMGUVQgtFV24sr0XGu5QMG2i1PZ5PzIjWIljlQalorZMHUTIdcSiweF83 nDD4NLMSt1dijCGBoVTNjrVSJi2YBiii2m1riz1x0XezoZO7DZIw7NBu2iEB/PIjkfGmEd CZtX/YRlz9G71o8mPhxsUxDXUZYxkOeGtrnvLqhW255F/xKldaFN5gYWyS/K7eInIJN4hY oIP0N/sgdDPw3LX8VIFTi5q/o7fTuV9OY02AgaSecoBSw8i2TVWodjOVKIU2nl1BkIigQn /x5JM0sFAYxq+0DzPXZj/orTtsSpsQIDML9F0+AdJsyJHqklGr0Xfc6iIuhctA== ARC-Seal: i=2; s=key1; d=yhetil.org; t=1632167166; a=rsa-sha256; cv=pass; b=dpjiccJ30B25yxHv7AaG8hHxJLSM44JGyOljImqbdbqk+yGipWQPUaNrsk9/YgZ5yXpNuG xxexlvD/kkWYcGVZnHVKpSJ85FTNONomfzRdzbtfjraAK2A8bCzITZhenkF8bOSbJDiY0y wHeEdZOMYiow5mGuW1OL1YxDGHEJcmRmjuyMQhRD5oFehBYvSWO4oB8CAdLxHGJJUHw+lA swK7nzkpX8xYykjhMC7rDwBzvV1IMhvnI9tczVYnvQ83x2i74CWkN2zm19yGyj/me5m8dt P4ELzpIHQJ2TQkzJHqUhiGy95q5dPwLQs3XgFF0IhN+V80k2inuNDBtcWAcjEA== ARC-Authentication-Results: i=2; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=beaver-labs.com header.s=zoho header.b=Qjb01rBm; arc=pass ("zohomail.com:s=zohoarc:i=1"); dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Spam-Score: 0.61 Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=beaver-labs.com header.s=zoho header.b=Qjb01rBm; arc=pass ("zohomail.com:s=zohoarc:i=1"); dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: D43F313872 X-Spam-Score: 0.61 X-Migadu-Scanner: scn0.migadu.com X-TUID: MJGEw1ucQQEn The way I'd do it for now would be: ssh cwebber@beefybuilder.org guix build mypackage ssh cwebber@beefybuilder.org guix publish ssh -N -R 8081:localhost:8080 cwebber@beefybuilder.org& guix build --substitute-urls=http://localhost:8081 mypackage First, and only once, you need to authorize your machine to use substitute packages from the beefy server ssh cwebber@beefybuilder.org guix archive --authorize scp cwebber@beefybuilder.org:/etc/guix/signing-key.pub /tmp/whatever guix archive --authorize < /tmp/whatever Let me know if that works for you. Cheers, Edouard. Christine Lemmer-Webber writes: > Sometimes I've wanted to offload builds ad-hoc to another server, like > so: > > guix build mypackage --offload-to=cwebber@beefybuilder.org > > This would offload by ssh'ing into that server and doing the offloading > there, but it's a more explicit user specified location. > > Thoughts? Would this be a worthwhile feature? > > - Christine > > PS: I suppose despite being a more explicit operation, I suppose the > /etc/guix/acl file can't be avoided under our current security model, > because we're still trusting that the remote location is trustworthy > enough to put this build result in our store as the result associated > with this input. One user could, otherwise, screw over all others.