Re: guix deploy: Failed to read private key

[Efraim Flashner <efraim@flashner.co.il>]

[-- Attachment #1: Type: text/plain, Size: 2046 bytes --]

On Tue, Feb 14, 2023 at 12:59:11AM -0800, Kitty-Cricket Piapiac wrote:
> Hello Guix,
> 
> I am relatively new to this package manager & system distribution. I am
> really struggling to get `guix deploy` working. I have a simple `deploy.scm`
> that looks something like this.
> 
>   $ cat deploy.scm
>   (define %os (operating-system ...))
> 
>   (define %ip "<ip>")
>   (define %key "<host-key>")
> 
>   (list
>     (machine
>       (operating-system %os)
>       (environment managed-host-environment-type)
>       (configuration (machine-ssh-configuration
>                        (host-name %ip)
>                        (host-key %key)
>                        (identity "id_ed25519")))))
> 
> When I try and run `guix deploy deploy.scm` as a regular user, I get the
> following error:
> 
>   $ guix deploy deploy.scm
>   The following 1 machine will be deployed:
>     <name>
> 
>   guix deploy: deploying to <name>
>   guix deploy: error: failed to deploy <name>: SSH authentication failed for
> '<ip>': Failed to read private key: /home/kitty/.ssh/id_ed25519
> 
> At first I thought there may be a permissions issue, but the private key is
> there, and with seemingly the right permissions,
> 
>   $ ll /home/kitty/.ssh/id_ed25519
>   -rw------- 1 kitty users 464 Feb 13 00:03 id_ed25519
> 
> and ssh-ing into the machine normally works fine,
> 
>   $ ssh root@<ip>
>   Enter passphrase for key '/home/kitty/.ssh/id_ed25519':
>   Last login: Mon Feb 13 17:24:54
>   root@<name> ~#
> 
> so I'm not really sure what could be causing this, and I'm not sure what to
> do now to troubleshoot. Anybody run into this before, or any ideas?

It can't read the private key because it is password protected. I'm not
sure if it's possible to do without removing the password on the key.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]