How to access private channel

How to access private channel

[Lo Peter]

Dear all,

I am experimenting with setting up a private channel as a private
github repository, then I prepared a channels file for testing:

(list (channel
       (name 'guix)
       (url "https://git.savannah.gnu.org/git/guix.git")
       (commit "9904a15a4c838362673c1affdbaf1e83d92fe8ff"))
      (channel
       (name 'my-guix-pkgs)
       (url "git@github.com:peterloleungyau/my-guix-pkgs.git")
       (commit "b51d236ebbbdd134bafb64e5092342a2d058ec2a")))

Then I try it with:
$ guix time-machine -C channels.scm --disable-authentication --
environment --ad-hoc python-radian
Updating channel 'guix' from Git repository at
'https://git.savannah.gnu.org/git/guix.git'...
guix time-machine: warning: channel authentication disabled
Updating channel 'my-guix-pkgs' from Git repository at
'git@github.com:peterloleungyau/my-guix-pkgs.git'...
guix time-machine: error: Git error: Failed to retrieve list of SSH
authentication methods: Failed getting response


So it seems the guix daemon cannot use the SSH of my user to access
the private git repository? How to get around this? Thanks in advance.

Regards,
Peter Lo

Re: How to access private channel

[Chris Marusich]

[-- Attachment #1: Type: text/plain, Size: 1535 bytes --]

Lo Peter <peterloleungyau@gmail.com> writes:

> Dear all,
>
> I am experimenting with setting up a private channel as a private
> github repository, then I prepared a channels file for testing:
>
> (list (channel
>        (name 'guix)
>        (url "https://git.savannah.gnu.org/git/guix.git")
>        (commit "9904a15a4c838362673c1affdbaf1e83d92fe8ff"))
>       (channel
>        (name 'my-guix-pkgs)
>        (url "git@github.com:peterloleungyau/my-guix-pkgs.git")
>        (commit "b51d236ebbbdd134bafb64e5092342a2d058ec2a")))
>
> Then I try it with:
> $ guix time-machine -C channels.scm --disable-authentication --
> environment --ad-hoc python-radian
> Updating channel 'guix' from Git repository at
> 'https://git.savannah.gnu.org/git/guix.git'...
> guix time-machine: warning: channel authentication disabled
> Updating channel 'my-guix-pkgs' from Git repository at
> 'git@github.com:peterloleungyau/my-guix-pkgs.git'...
> guix time-machine: error: Git error: Failed to retrieve list of SSH
> authentication methods: Failed getting response
>
>
> So it seems the guix daemon cannot use the SSH of my user to access
> the private git repository? How to get around this? Thanks in advance.

Does it work if you don't try using "time-machine"?  For example:

  guix pull -C channels.scm --disable-authentication

Followed by:

  guix environment --ad-hoc python-radian

Does that work?  I wonder if the "time-machine" part doesn't properly
handle channels fetched over SSH.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 861 bytes --]

Re: How to access private channel

[Lo Peter]

After some googling, I found two related bug reports of libssh2:
https://github.com/libgit2/pygit2/issues/1013
https://github.com/saltstack/salt/issues/57121

I guess Guix uses libssh2 to process private channels over SSH, if so,
I think doing guix pull first would encounter the same problem.

The suggested workaround is to generate a SSH key in the older PEM
format using the "-m PEM" option of ssh-keygen.
I have tried the workaround and it works for me.

Regards,
Peter Lo

On Sat, Jul 10, 2021 at 1:42 AM Chris Marusich <cmmarusich@gmail.com> wrote:
>
> Lo Peter <peterloleungyau@gmail.com> writes:
>
> > Dear all,
> >
> > I am experimenting with setting up a private channel as a private
> > github repository, then I prepared a channels file for testing:
> >
> > (list (channel
> >        (name 'guix)
> >        (url "https://git.savannah.gnu.org/git/guix.git")
> >        (commit "9904a15a4c838362673c1affdbaf1e83d92fe8ff"))
> >       (channel
> >        (name 'my-guix-pkgs)
> >        (url "git@github.com:peterloleungyau/my-guix-pkgs.git")
> >        (commit "b51d236ebbbdd134bafb64e5092342a2d058ec2a")))
> >
> > Then I try it with:
> > $ guix time-machine -C channels.scm --disable-authentication --
> > environment --ad-hoc python-radian
> > Updating channel 'guix' from Git repository at
> > 'https://git.savannah.gnu.org/git/guix.git'...
> > guix time-machine: warning: channel authentication disabled
> > Updating channel 'my-guix-pkgs' from Git repository at
> > 'git@github.com:peterloleungyau/my-guix-pkgs.git'...
> > guix time-machine: error: Git error: Failed to retrieve list of SSH
> > authentication methods: Failed getting response
> >
> >
> > So it seems the guix daemon cannot use the SSH of my user to access
> > the private git repository? How to get around this? Thanks in advance.
>
> Does it work if you don't try using "time-machine"?  For example:
>
>   guix pull -C channels.scm --disable-authentication
>
> Followed by:
>
>   guix environment --ad-hoc python-radian
>
> Does that work?  I wonder if the "time-machine" part doesn't properly
> handle channels fetched over SSH.
>
> --
> Chris