[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Public guix offload server
From: |
Arun Isaac |
Subject: |
Re: Public guix offload server |
Date: |
Fri, 22 Oct 2021 01:53:44 +0530 |
Hi,
>> Currently, guix offload requires mutual trust between the master and
>> the build machines. If we could make the trust only one-way, security
>> might be less of an issue.
>
> It might! It's easy to imagine a second, less powerful offload
> protocol where clients can submit only derivations to be built by the
> remote daemon, plus fixed-output derivations. None of the ‘let me
> send the entire binary toolchain so you don't have to build it from
> scratch’ of the current protocol. This at least removes their control
> over the source hash.
I just realized we might already have something close to this second,
less powerful offload protocol that needs only one-way trust. According
to the NEWS file, since Guix 0.13.0, the GUIX_DAEMON_SOCKET environment
variable lets us specify remote daemons. See "(guix) The Store" in the
manual for detailed documentation. The only thing missing is some way to
retrieve the built output from the remote store.
Regards,
Arun
signature.asc
Description: PGP signature
- Re: Public guix offload server, (continued)
- Re: Public guix offload server, zimoun, 2021/10/21
- Re: Public guix offload server, Jonathan McHugh, 2021/10/21
- Re: Public guix offload server, zimoun, 2021/10/21
- Re: Public guix offload server, Tobias Geerinckx-Rice, 2021/10/21
- Re: Public guix offload server, zimoun, 2021/10/22
- Re: Public guix offload server, Arun Isaac, 2021/10/23
- Re: Public guix offload server, zimoun, 2021/10/23
- Re: Public guix offload server, Arun Isaac, 2021/10/24
- Re: Public guix offload server, indieterminacy, 2021/10/25
- Re: Public guix offload server, Jonathan McHugh, 2021/10/22
Re: Public guix offload server,
Arun Isaac <=
Re: Public guix offload server, Ludovic Courtès, 2021/10/29
Re: Public guix offload server, Leo Famulari, 2021/10/20
Re: Public guix offload server, jbranso, 2021/10/21