Deploy to guix machine

Deploy to guix machine

[Reza Housseini]

[-- Attachment #1.1.1: Type: text/plain, Size: 2931 bytes --]

Hi list

I have a server running guix system, with this configuration

(list (machine
        (operating-system my-server)
        (environment managed-host-environment-type)
        (configuration (machine-ssh-configuration
                        (host-name "my-host")
                        (system "x86_64-linux")
		       (identity "~/.ssh/id_card.pub")))))

which I used to deploy without problems. But now when I run ~guix 
deploy~ I get

;;; [2022/08/15 09:51:18.979345, 0] [GSSH ERROR] Channel opening 
failure: channel 67 error (2) open failed: #<input-output: channel 
(closed) 7fb349ddf560>
Backtrace:
In guix/store.scm:
   1405:13 19 (map/accumulate-builds #<store-connection 256.99 
7fb348daf2d0> #<procedure 7fb343cf7860…> …)
   1380:11 18 (map/accumulate-builds #<store-connection 256.99 
7fb348daf2d0> #<procedure 7fb34b551060…> …)
    1298:8 17 (call-with-build-handler #<procedure 7fb34b3fee40 at 
guix/store.scm:1333:2 (continue st…> …)
In ice-9/boot-9.scm:
   1752:10 16 (with-exception-handler _ _ #:unwind? _ #:unwind-for-type _)
In guix/scripts/deploy.scm:
     168:6 15 (_)
In guix/store.scm:
   2168:25 14 (run-with-store #<store-connection 256.99 7fb348daf2d0> _ 
#:guile-for-build _ #:system _ …)
In gnu/machine/ssh.scm:
    506:32 13 (_ _)
In ice-9/boot-9.scm:
   1752:10 12 (with-exception-handler _ _ #:unwind? _ #:unwind-for-type _)
In gnu/machine/ssh.scm:
    506:32 11 (_)
In guix/store.scm:
   2168:25 10 (run-with-store #<store-connection 256.99 7fb358950c30> _ 
#:guile-for-build _ #:system _ …)
In guix/remote.scm:
    138:10  9 (_ _)
In guix/store.scm:
   2040:38  8 (_ #<store-connection 256.99 7fb358950c30>)
In guix/ssh.scm:
     376:2  7 (send-files #<store-connection 256.99 7fb358950c30> _ 
#<store-connection 256.99 7fb34e7…> …)
     222:5  6 (remote-run (begin (use-modules (guix) (srfi srfi-34) 
(rnrs io ports) (rnrs #)) (# …) …) #)
In ssh/popen.scm:
      64:4  5 (open-remote-pipe* _ "r+" _ . _)
In unknown file:
            4 (channel-open-session #<input-output: channel (closed) 
7fb349ddf560>)
In ice-9/boot-9.scm:
   1685:16  3 (raise-exception _ #:continuable? _)
   1683:16  2 (raise-exception _ #:continuable? _)
   1685:16  1 (raise-exception _ #:continuable? _)
   1685:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Throw to key `guile-ssh-error' with args `("channel-open-session" 
"Channel opening failure: channel 67 error (2) open failed" 
#<input-output: channel (closed) 7fb349ddf560> #f)'.

I suspect it has something to do with using a hardware key as my private 
SSH key. I have the public key in the file ~/.ssh/id_card.pub and used 
this as my identity, this was working fine before.

-- 
Reza Housseini

This message is signed with my GnuPG key:

     C0F3 0812 9AF2 80F4 0830 C2C1 C375 C6AF 0512 5C52

[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 15557 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

Re: Deploy to guix machine

[Csepp]

Reza Housseini <reza.housseini@gmail.com> writes:

> [[PGP Signed Part:Undecided]]
> Hi list
>
> I have a server running guix system, with this configuration
>
> (list (machine
>        (operating-system my-server)
>        (environment managed-host-environment-type)
>        (configuration (machine-ssh-configuration
>                        (host-name "my-host")
>                        (system "x86_64-linux")
> 		       (identity "~/.ssh/id_card.pub")))))

Try replacing "~" with (getenv "HOME")?  I don't see anything in the
manual about it auto-expanding tildes like Bash does.

Re: Deploy to guix machine

[Reza Housseini]

[-- Attachment #1.1.1: Type: text/plain, Size: 456 bytes --]

> Try replacing "~" with (getenv "HOME")?  I don't see anything in the
> manual about it auto-expanding tildes like Bash does.

Thanks good catch, I tried it but the error message is still the same 
must be something different. I especially wonder why it was working 
before, maybe I should check the commits in deploy...


-- 
Reza Housseini

This message is signed with my GnuPG key:

     C0F3 0812 9AF2 80F4 0830 C2C1 C375 C6AF 0512 5C52

[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 15557 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

Re: Deploy to guix machine

[宋文武]

Reza Housseini <reza.housseini@gmail.com> writes:

>> Try replacing "~" with (getenv "HOME")?  I don't see anything in the
>> manual about it auto-expanding tildes like Bash does.
>
> Thanks good catch, I tried it but the error message is still the same
> must be something different. I especially wonder why it was working
> before, maybe I should check the commits in deploy...

Hello, the 'identity' field in 'machine-ssh-configuration' is for the
SSH private key, not the public key.

I guess it was working due to ssh agent was picked, but not now.

Re: Deploy to guix machine

[Reza Housseini]

[-- Attachment #1.1.1: Type: text/plain, Size: 403 bytes --]

> Hello, the 'identity' field in 'machine-ssh-configuration' is for the
> SSH private key, not the public key.

As I have a hardware key, there is no private key file to provide. What 
would be the course of action in this case? Or is it not usable with a 
hardware key?

-- 
Reza Housseini

This message is signed with my GnuPG key:

     C0F3 0812 9AF2 80F4 0830 C2C1 C375 C6AF 0512 5C52

[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 15557 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]