Distributed build: Difference between revisions

imported>Symphorien
Explain how to set up remote builders as substituters.
imported>Symphorien
Prerequisites: Replace StrictHostKeyChecking=no by StrictHostKeyChecking=accept-new in the tip
Line 33: Line 33:
}}
}}


{{Tip|You can add the <code>StrictHostKeyChecking no</code> and <code>UserKnownHostsFile /dev/null</code> options to disable host authentication for the remote builder, which can be convenient for instance when working with frequently replaced local VMs. Do not use this for machines accessed via any network you do not trust, especially the internet!}}
{{Tip|When connecting to a new remote builder, ssh will ask you whether you trust the identity of the builder. Nix needs fully unattended connection, so you may want to accept all fingerprints by default. To achieve this you can use <code><nowiki>StrictHostKeyChecking=accept-new</nowiki></code>. Note that this has security implications if you usually really check the fingerprints when prompted to do so.}}


SSH connection must be non-interactive so we use a public key '''without a passphrase'''.
SSH connection must be non-interactive so we use a public key '''without a passphrase'''.
Line 40: Line 40:
# do not add a passphrase to the ssh key!
# do not add a passphrase to the ssh key!
$ ssh-copy-id -i ~/.ssh/nix_remote builder
$ ssh-copy-id -i ~/.ssh/nix_remote builder
}}
}}.


When you are done, you can test your setup like this:
When you are done, you can test your setup like this: