GNU logs - #54950, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#54950: Connecting to remote guix daemon with encrypted SSH key fails
Resent-From: Arun Isaac <arunisaac@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 15 Apr 2022 11:10:01 +0000
Resent-Message-ID: <handler.54950.B.165002098131975 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 54950 <at> debbugs.gnu.org
From: Arun Isaac <arunisaac@HIDDEN>
Date: Fri, 15 Apr 2022 16:39:25 +0530
Message-ID: <87pmli1u3e.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Received-SPF: pass client-ip=139.59.75.54;
 envelope-from=arunisaac@HIDDEN; helo=mugam.systemreboot.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.4 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.4 (--)


I have an SSH key encrypted with a passphrase. When I try connecting to
a remote guix daemon with that encrypted SSH key, it fails with the
following error message.

--8<---------------cut here---------------start------------->8---
$ GUIX_DAEMON_SOCKET=ssh://foo guix build -v3 hello
guix build: error: SSH authentication failed for 'foo': Access
denied for 'publickey'. Authentication that can continue: publickey
--8<---------------cut here---------------end--------------->8---

I expected some kind of prompt asking me for the passphrase, but did not
get any. The same command works if I set up ssh-agent and add the
relevant key to it.

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Arun Isaac <arunisaac@HIDDEN>
Subject: bug#54950: Acknowledgement (Connecting to remote guix daemon with
 encrypted SSH key fails)
Message-ID: <handler.54950.B.165002098131975.ack <at> debbugs.gnu.org>
References: <87pmli1u3e.fsf@HIDDEN>
X-Gnu-PR-Message: ack 54950
X-Gnu-PR-Package: guix
Reply-To: 54950 <at> debbugs.gnu.org
Date: Fri, 15 Apr 2022 11:10:01 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 54950 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
54950: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D54950
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#54950: Connecting to remote guix daemon with encrypted SSH key fails
Resent-From: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 08 Jun 2022 20:31:02 +0000
Resent-Message-ID: <handler.54950.B54950.165472023919599 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Arun Isaac <arunisaac@HIDDEN>
Cc: 54950 <at> debbugs.gnu.org
From: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
References: <87pmli1u3e.fsf@HIDDEN>
Date: Wed, 08 Jun 2022 16:30:28 -0400
In-Reply-To: <87pmli1u3e.fsf@HIDDEN> (Arun Isaac's message of "Fri, 
 15 Apr 2022 16:39:25 +0530")
Message-ID: <87a6amkie3.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi,

Arun Isaac <arunisaac@HIDDEN> writes:

> I have an SSH key encrypted with a passphrase. When I try connecting to
> a remote guix daemon with that encrypted SSH key, it fails with the
> following error message.
>
> $ GUIX_DAEMON_SOCKET=ssh://foo guix build -v3 hello
> guix build: error: SSH authentication failed for 'foo': Access
> denied for 'publickey'. Authentication that can continue: publickey
>
> I expected some kind of prompt asking me for the passphrase, but did not
> get any. The same command works if I set up ssh-agent and add the
> relevant key to it.

I suspect this is due to changes in OpenSSH *client* that now refuse
older RSA keys for security reasons.

Could you retry with the following option: 'StrictHostKeyChecking no'
applied to the host in your ~/.ssh/config?

If that's indeed the problem, you'll want to upgrade your key to
something more modern like ed25519.

I hope that helps,

Maxim

Message sent to bug-guix@HIDDEN:

Subject: bug#54950: Connecting to remote guix daemon with encrypted SSH key fails
Resent-From: Arun Isaac <arunisaac@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 15 Jun 2022 06:31:02 +0000
Resent-Message-ID: <handler.54950.B54950.16552746451137 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
Cc: 54950 <at> debbugs.gnu.org
From: Arun Isaac <arunisaac@HIDDEN>
In-Reply-To: <87a6amkie3.fsf@HIDDEN>
References: <87pmli1u3e.fsf@HIDDEN> <87a6amkie3.fsf@HIDDEN>
Date: Wed, 15 Jun 2022 12:00:36 +0530
Message-ID: <87sfo630c3.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>


Hi Maxim,

> I suspect this is due to changes in OpenSSH *client* that now refuse
> older RSA keys for security reasons.

This doesn't seem to be. Here's why: I have another machine that I ssh
to using an unencrypted RSA key. I am able to connect to the Guix daemon
on that machine without any trouble. What's more, the machine with an
encrypted key, whose Guix daemon I'm unable to connect to, uses an ECDSA
key.

> Could you retry with the following option: 'StrictHostKeyChecking no'
> applied to the host in your ~/.ssh/config?

Adding 'StrictHostKeyChecking no' makes no difference. The unencrypted
key still works, and the encrypted doesn't.

Cheers!
Arun

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#54950: Connecting to remote guix daemon with encrypted SSH key fails
Resent-From: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 15 Jun 2022 15:47:02 +0000
Resent-Message-ID: <handler.54950.B54950.165530801513214 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 54950
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Arun Isaac <arunisaac@HIDDEN>
Cc: 54950 <at> debbugs.gnu.org
Received: via spool by 54950-submit <at> debbugs.gnu.org id=B54950.165530801513214
          (code B ref 54950); Wed, 15 Jun 2022 15:47:02 +0000
Received: (at 54950) by debbugs.gnu.org; 15 Jun 2022 15:46:55 +0000
Received: from localhost ([127.0.0.1]:39608 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1o1VEM-0003R3-Sx
	for submit <at> debbugs.gnu.org; Wed, 15 Jun 2022 11:46:55 -0400
Received: from mail-qk1-f181.google.com ([209.85.222.181]:43798)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maxim.cournoyer@HIDDEN>) id 1o1VEI-0003Qo-9b
 for 54950 <at> debbugs.gnu.org; Wed, 15 Jun 2022 11:46:53 -0400
Received: by mail-qk1-f181.google.com with SMTP id p63so9001725qkd.10
 for <54950 <at> debbugs.gnu.org>; Wed, 15 Jun 2022 08:46:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=from:to:cc:subject:references:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=q72UUgNIDAWLw+IIetjfhAWpKddjbkqj+T3o9USl4zs=;
 b=eQP2jzNGEOUncHDemzjpXvST0xdeGk1+y3hhTfQsvhN3NBdYl8jS/s1VtMkfogw2Hq
 5xF9pte7cg25E7OQJKJYgyXFSCehqq1v7DJ97uNwffikSb8Hl25/oWTcbi42tFZQCtgy
 DEfUzIgQjrBeF66n28McjdVTjEaSVY61P83VTv2Df+U8aaSgBnFvwZBOFpt3Sw+K7ycZ
 OdnadjkfGhhBxUxycNGZLA9iqJm9Sh/IbUiz4nUmHuylgbF0szpqy8OJ3W7SAOmQAZNv
 +unSt9nqCWv4aO+bI9enMOwhUHev6hO1Sho9Eyzv37ciXucVRx3/IgEkSFOydDCiMx8S
 kbNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to
 :message-id:user-agent:mime-version;
 bh=q72UUgNIDAWLw+IIetjfhAWpKddjbkqj+T3o9USl4zs=;
 b=0WlUnOuacy7FX2Lg1kSFZCjFAphOZ1OrwOY+s5c2h1r82898jf1bcXo497YJ2sADg1
 9V1EtWa0t/qe7lheeUpg1xW82MZ6s+LI0jEt6JGoVIX1p8YqSJKrr6Bh7eIy4Lf53AIK
 OlUb2lCGoWM0q1/d34CsGE7OZHrTqtMwb29OWQaFIVh/AD53LYPMBX7vbilmUfd9tEqX
 e90uHquQB6XA6x3I6W1nSuM98OQjgKY+tDKC0rIjwHnbNiQXruPuSLtMMEwhWQmTITFW
 OoHaA5npYevD0sVJlh+AeBqTrzEX2VXuXEeh1qp0HfXGNlurb09s5f/xXc1QLIGuTf1C
 gMTg==
X-Gm-Message-State: AJIora/7HLb6FLFnKBqXMX5B+rwKrhoyf2XZp5Y2CvRbKUMuZH4LzF7n
 beZLG4yoKlPei82jhfzsaU7WnIhtU6RcDQ==
X-Google-Smtp-Source: AGRyM1vbPujWN+gtSVLgQgUtySY9ZrVQHGSLo6Ba7/OcKFaDAUnq9i4IWKZejmKo72QPF0UYm6Z5kQ==
X-Received: by 2002:a05:620a:25c7:b0:699:be71:59ee with SMTP id
 y7-20020a05620a25c700b00699be7159eemr258844qko.222.1655308004150; 
 Wed, 15 Jun 2022 08:46:44 -0700 (PDT)
Received: from hurd (dsl-10-149-53.b2b2c.ca. [72.10.149.53])
 by smtp.gmail.com with ESMTPSA id
 bi3-20020a05620a318300b006a700aad48bsm11801246qkb.91.2022.06.15.08.46.43
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Wed, 15 Jun 2022 08:46:43 -0700 (PDT)
From: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
References: <87pmli1u3e.fsf@HIDDEN> <87a6amkie3.fsf@HIDDEN>
 <87sfo630c3.fsf@HIDDEN>
Date: Wed, 15 Jun 2022 11:46:42 -0400
In-Reply-To: <87sfo630c3.fsf@HIDDEN> (Arun Isaac's message of "Wed, 
 15 Jun 2022 12:00:36 +0530")
Message-ID: <8735g6dj4t.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi Arun,

Arun Isaac <arunisaac@HIDDEN> writes:

> Hi Maxim,
>
>> I suspect this is due to changes in OpenSSH *client* that now refuse
>> older RSA keys for security reasons.
>
> This doesn't seem to be. Here's why: I have another machine that I ssh
> to using an unencrypted RSA key. I am able to connect to the Guix daemon
> on that machine without any trouble. What's more, the machine with an
> encrypted key, whose Guix daemon I'm unable to connect to, uses an ECDSA
> key.
>
>> Could you retry with the following option: 'StrictHostKeyChecking no'
>> applied to the host in your ~/.ssh/config?
>
> Adding 'StrictHostKeyChecking no' makes no difference. The unencrypted
> key still works, and the encrypted doesn't.

Thanks for checking.  Other things to try:

Kill pinentry, which is potentially waiting for the passphrase on the
wrong X11 display or tty, for example if you accessed the machine via
SSH:

killall pinentry

I don't know which ssh agent you use; I use the 'gpg-agent' provided by
GnuPG.  info '(gnupg) Common Problems' has this:

   * SSH hangs while a popping up pinentry was expected

     SSH has no way to tell the gpg-agent what terminal or X display it
     is running on.  So when remotely logging into a box where a
     gpg-agent with SSH support is running, the pinentry will get popped
     up on whatever display the gpg-agent has been started.  To solve
     this problem you may issue the command

          echo UPDATESTARTUPTTY | gpg-connect-agent

     and the next pinentry will pop up on your display or screen.
     However, you need to kill the running pinentry first because only
     one pinentry may be running at once.  If you plan to use ssh on a
     new display you should issue the above command before invoking ssh
     or any other service making use of ssh.

It seems this gotcha would also apply to other SSH agents.  I've had
this problem in the past, when SSH'in to a remote machine that had a
graphical session running, and killing the running pinentry and issuing
the above 'echo UPDATESTARTUPTTY | gpg-connect-agent' command did the
trick.

Let me know if this helps.

Maxim

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#54950: Connecting to remote guix daemon with encrypted SSH key fails
Resent-From: Arun Isaac <arunisaac@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 16 Jun 2022 06:35:03 +0000
Resent-Message-ID: <handler.54950.B54950.165536127823383 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 54950
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Maxim Cournoyer <maxim.cournoyer@HIDDEN>
Cc: 54950 <at> debbugs.gnu.org
Received: via spool by 54950-submit <at> debbugs.gnu.org id=B54950.165536127823383
          (code B ref 54950); Thu, 16 Jun 2022 06:35:03 +0000
Received: (at 54950) by debbugs.gnu.org; 16 Jun 2022 06:34:38 +0000
Received: from localhost ([127.0.0.1]:40507 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1o1j5S-000655-55
	for submit <at> debbugs.gnu.org; Thu, 16 Jun 2022 02:34:38 -0400
Received: from mugam.systemreboot.net ([139.59.75.54]:46418)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <arunisaac@HIDDEN>) id 1o1j5P-00064t-1B
 for 54950 <at> debbugs.gnu.org; Thu, 16 Jun 2022 02:34:36 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date:
 References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To:
 Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:
 Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:
 List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
 bh=qmCJ9xfk31uLLXYq5Basof3K1tbjIOC8vOlwGnpotqQ=; b=fcNbBXlzC9lGgQQFbj+qmBc3K1
 3wAexca9nz9z1ZRDmYvZFk9cEIz18vcBwRSdlYJhw8dGS85HE05Xs71qzjaufvazuW5ewHaK08Hz1
 tDocb4xAiDsrj1+6lOyeUPza1LqNbzWxPD7kg03Ddnc5Cy5DPQX5HBUtk6tl95yhC36vmkmCrSVTV
 xjgb15J4AVUXMiJ7+G0QkrFl/GLqrY2nT7QwgiqlidQLalY309KuVsNMhZcCI6fmxczLooTIxk4bN
 KZNuwzTCGOLbDonxqQBnTTP1UanTmxeErV1PRIit6RbsimyN/ut5AAthSVoeblm4mfhmNy/5kz+me
 va1C6lag==;
Received: from [192.168.2.1] (port=4786 helo=steel)
 by systemreboot.net with esmtpsa (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95)
 (envelope-from <arunisaac@HIDDEN>) id 1o1j5L-000EUa-A4;
 Thu, 16 Jun 2022 12:04:31 +0530
From: Arun Isaac <arunisaac@HIDDEN>
In-Reply-To: <8735g6dj4t.fsf@HIDDEN>
References: <87pmli1u3e.fsf@HIDDEN> <87a6amkie3.fsf@HIDDEN>
 <87sfo630c3.fsf@HIDDEN> <8735g6dj4t.fsf@HIDDEN>
Date: Thu, 16 Jun 2022 12:04:30 +0530
Message-ID: <87ilp12k21.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)


Hi Maxim,

I normally use neither OpenSSH's ssh-agent nor gpg-agent's ssh-agent
feature. But, when I do, it works. I didn't run into any pinentry issues
like you described. But, that's only because a passphrase entry is not
required at the time of `guix build'. Passphrase entry is required only
at the time of `ssh-add' when I am adding the key to the ssh-agent. Just
to be clear, here are the exact steps I used to set up gpg-agent.

Enable gpg's ssh-agent feature

$ echo use-agent >> ~/.gnupg/gpg.conf
$ echo enable-ssh-support >> ~/.gnupg/gpg-agent.conf

pkill and restart gpg-agent (command not shown). Then, add the key to
gpg's ssh-agent. A passphrase is prompted at this point.

$ ssh-add ~/.ssh/id_ecdsa

guix build with remote daemon. A passphrase is not prompted at this
point because it was already added into the ssh-agent in the last step.

$ SSH_AUTH_SOCK=/run/user/1000/gnupg/S.gpg-agent.ssh
GUIX_DAEMON_SOCKET=ssh://foo guix build -v3 hello

So, with an ssh-agent, guix build on a remote daemon works. But, I'd
like it to work without an ssh-agent. Is that possible?

Regards,
Arun

Last modified: Thu, 16 Jun 2022 06:45:01 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.