Re: Not sure how to add an offload server

[Simen Endsjø]

Strange! I found out the error was passed by the offload server, so it was
complaining that it didn't trust my laptop! I added my laptop to authorized
keys on the server, and then it works! `guix archive --authorize` complains that
it should be set in the system configuration for Guix SD though, so I did that.

But /usr/local is a mystery. I tried deleting it, but a reconfigure added back
/usr/local/guix/acl. And `guix offload` commands still uses (the now missing
file) /etc/local/guix/machines.scm by default.

A difference between our configurations is that I'm modifying build-machines in
the original guix-configuration using modify-services. But that really shouldn't
make any difference, should it?


On Thu, Nov 7, 2024, at 00:49, Tomas Volf wrote:
> Simen Endsjø <contact@simendsjo.me> writes:
> 
> > I don't understand how /etc/guix and /usr/local/etc/guix fits together.
> > /usr/local/etc/guix/acl does not contain the public key, but it exists
> > and symlinks to a store item.
> 
> They should not fit together, /usr/local does not exist at all on my
> GuixSD system.
> 
> > Could someone link me to a working offload setup?
> 
> These two blocks are all I need.
> 
> --8<---------------cut here---------------start------------->8---
> (define %build-machines
>   (list #~(build-machine
>            (name "some-server")
>            (systems (list "x86_64-linux" "i686-linux" "aarch64-linux"))
>            (host-key "some-host-key")
>            (user "build-offload")
>            (parallel-builds 4)
>            (overload-threshold #f)
>            (private-key "/some/key"))))
> --8<---------------cut here---------------end--------------->8---
> 
> --8<---------------cut here---------------start------------->8---
>               (simple-service 'offload guix-service-type
>                               (guix-extension
>                                (build-machines %build-machines)))
> --8<---------------cut here---------------end--------------->8---
> 
> (Well, I also needed to authorized the keys using `guix archive', as the
> manual instructs.  And create the `build-offload' user on the server
> with allowed login by ssh key.)
> 
> T.
> 
> -- 
> There are only two hard things in Computer Science:
> cache invalidation, naming things and off-by-one errors.
> 
> 
> *Attachments:*
>  • signature.asc