New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

[Collin J. Doering]

[-- Attachment #1: Type: text/plain, Size: 2388 bytes --]

Dear Guix Community,

I am excited to announce that Guix substitutes (for x86_64) are now available in North America, thanks to the generous contribution of server hardware and infrastructure from GeneNetwork.org.

This new server enhances the availability and redundancy of Guix substitutes, ensuring a more robust and reliable experience for users in North America.

We will be posting a detailed blog article about the setup of the build farm in the coming weeks, but the Guix system configuration and notes about its setup can be found at https://git.rekahsoft.ca/rekahsoft/guix-north-america/. Stay tuned for more information!

# Using Substitutes from cuirass.genenetwork.org

If you're using Guix System, you can use the cuirass.genenetwork.org substitute server completing the following:

1. Add `https://cuirass.genenetwork.org` to the list of substitute servers (using the `substitute-urls` field of `guix-configuration` passed to the `guix-daemon` service).
2. Adjust guix-daemon ACLs to include the following public key (using the `authorized-keys` field of `guix-configuration` passed to the `guix-daemon` service).

```
(public-key 
 (ecc 
  (curve Ed25519)
  (q #9578AD6CDB23BA51F9C4185D5D5A32A7EEB47ACDD55F1CCB8CEE4E0570FBF961#)
  )
)
```

In the future, we hope to work with Guix maintainers to include this substitute server as one of the provided Guix System defaults.

When using Guix on a foreign distribution, you'll need to do the following to enable substitutes from cuirass.genenetwork.org:

1. Add the substitute url using the `--substitute-urls` option to guix-daemon. Assuming your foreign distribution uses systemd, this can be done using the following.

```
sudo systemctl edit --full guix-daemon
sudo systemctl restart guix-daemon.service
```

2. Add the public key for cuirass.genenetwork.org to the guix-daemon ACLs.

```
guix archive --authorize < /root/.config/guix/current/share/guix/cuirass.genenetwork.org.pub
```

If you want to just use ci.guix.gnu.org, or cuirass.genenetwork.org for that matter, you'll need to adjust the substitute URLs configuration for the guix-daemon to just refer to the substitute servers you want to use.

Best regards,

PS: thanks for the support Arun Isaac and Pjotr Prins!

-- 
Collin J. Doering

http://rekahsoft.ca
http://blog.rekahsoft.ca
http://git.rekahsoft.ca

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 255 bytes --]

Re: New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

[Ludovic Courtès]

Hi Collin,

"Collin J. Doering" <collin@rekahsoft.ca> skribis:

> I am excited to announce that Guix substitutes (for x86_64) are now available in North America, thanks to the generous contribution of server hardware and infrastructure from GeneNetwork.org.
>
> This new server enhances the availability and redundancy of Guix substitutes, ensuring a more robust and reliable experience for users in North America.
>
> We will be posting a detailed blog article about the setup of the build farm in the coming weeks, but the Guix system configuration and notes about its setup can be found at https://git.rekahsoft.ca/rekahsoft/guix-north-america/. Stay tuned for more information!

Congrats!  I’m confident many in the Americas will find it useful.

If I’m not mistaken, the machine is configured¹ to take substitutes from
ci.guix and bordeaux.guix.  It would be interesting (but obviously more
expensive CPU-wise…) to not do that as a way to get diverse builds that
can be checked with ‘guix challenge’.

Thanks,
Ludo’.

¹ https://git.rekahsoft.ca/rekahsoft/guix-north-america/src/branch/master/.guix/guix-na/config/balg02.scm

Re: New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

[Collin J. Doering]

[-- Attachment #1: Type: text/plain, Size: 1773 bytes --]

Hi Ludo,

Thanks! Following your advice, I have adjusted the system configuration to no longer use the default guix substitute servers[1] and deployed it to cuirass.genenetwork.org.

Kind regards,

PS: originally sent this only to Ludo due to an issue with my mail client.

Footnotes:
[1] https://git.rekahsoft.ca/rekahsoft/guix-north-america/commit/9e9816870a30d1345ae1120b5b8e8c77b17d34d4

On 11 Jul 2024 at 12:01, Ludovic Courtès <ludo@gnu.org> wrote:

> Hi Collin,
>
> "Collin J. Doering" <collin@rekahsoft.ca> skribis:
>
>> I am excited to announce that Guix substitutes (for x86_64) are now available in North America, thanks to the generous contribution of server hardware and infrastructure from GeneNetwork.org.
>>
>> This new server enhances the availability and redundancy of Guix substitutes, ensuring a more robust and reliable experience for users in North America.
>>
>> We will be posting a detailed blog article about the setup of the build farm in the coming
>> weeks, but the Guix system configuration and notes about its setup can be found at
>> https://git.rekahsoft.ca/rekahsoft/guix-north-america/. Stay tuned for more information!
>
> Congrats!  I’m confident many in the Americas will find it useful.
>
> If I’m not mistaken, the machine is configured¹ to take substitutes from
> ci.guix and bordeaux.guix.  It would be interesting (but obviously more
> expensive CPU-wise…) to not do that as a way to get diverse builds that
> can be checked with ‘guix challenge’.
>
> Thanks,
> Ludo’.
>
> ¹ https://git.rekahsoft.ca/rekahsoft/guix-north-america/src/branch/master/.guix/guix-na/config/balg02.scm

-- 
Collin J. Doering

http://rekahsoft.ca
http://blog.rekahsoft.ca
http://git.rekahsoft.ca

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 255 bytes --]

Re: New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

[Vagrant Cascadian]

[-- Attachment #1: Type: text/plain, Size: 771 bytes --]

On 2024-07-06, Collin J. Doering wrote:
> I am excited to announce that Guix substitutes (for x86_64) are now
> available in North America, thanks to the generous contribution of
> server hardware and infrastructure from GeneNetwork.org.

The last evaluation that actually seems to have succeeded was from late
August:

  https://cuirass.genenetwork.org/eval/154706

All the evaluations since then have failed, up until around
mid-september...

I was pretty thrilled to use it while it was working... especially as it
provided another reference point to check reproducible builds of guix!

I imagine running a whole build farm would be pretty intensive resource.
Soooo... I am curious what the current prospects are of getting it
running again? :)


live well,
  vagrant

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 227 bytes --]