Re: Secure GNU Guix offloading

2021-04-03 Thread Léo Le Bouter
On Tue, 2021-03-30 at 10:26 +0200, Ludovic Courtès wrote: > Hi! > > Léo Le Bouter skribis: > > > I don't want to give more access than what SSH non-root access > > would > > give, and I think it would be possible to do something helpful in > > GNU > > Guix offloading so it can work even without

Re: Secure GNU Guix offloading

2021-03-30 Thread Ludovic Courtès
Hi! Léo Le Bouter skribis: > I don't want to give more access than what SSH non-root access would > give, and I think it would be possible to do something helpful in GNU > Guix offloading so it can work even without the offload machine > trusting the client's store public signing key. One

Secure GNU Guix offloading

2021-03-23 Thread Léo Le Bouter
Hello! I have powerful machines at hand and I would like to share them through the GNU Guix offloading facility so that they are easy to use. The problem is that setting up offloading requires my machine to trust each and every client's store public key which means they can spoof results of