Fix: permission denied when fetching repo via npins #17

Merged
jakehamilton merged 1 commit from austreelis/fix/npins-https-sources into main 2025-09-03 14:23:20 +00:00 AGit
Member

people were denied permission to clone aux repos to their store when building
from source if they didn't have an account with a correct local ssh setup.

people were denied permission to clone aux repos to their store when building from source if they didn't have an account with a correct local ssh setup.
austreelis added 1 commit 2025-09-03 10:06:43 +00:00
people were denied permission to clone aux repos to their store when building
from source if they didn't have an account with a correct local ssh setup.
austreelis changed title from Fix: permission denied when fetching repo via npins to WIP: Fix: permission denied when fetching repo via npins 2025-09-03 10:16:13 +00:00
Author
Member

I still to test it does solve it. I have trouble fully replicating the issue :x

Edit: I think this confirms it

((2c19b9ff))❯ nix-store --gc
finding garbage collector roots...
deleting garbage...
deleting '/nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87'
deleting '/nix/store/c91q5c8yvs0phnpr47sapcnhgjh8c9zj-lib.git-c55943c'
deleting unused links...
note: currently hard linking saves 2895.04 MiB
2 store paths deleted, 0.61 MiB freed
((2c19b9ff))❯ nix eval --no-eval-cache -f tidepool/npins --raw --apply 't: t.foundation.outPath.outPath'
forgejo@git.auxolotl.org: Permission denied (publickey,keyboard-interactive).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
warning: could not read HEAD ref from repo at 'git+ssh://forgejo@git.auxolotl.org/auxolotl/foundation.git', using 'master'
fetching Git repository 'git+ssh://forgejo@git.auxolotl.org/auxolotl/foundation.git'forgejo@git.auxolotl.org: Permission denied (publickey,keyboard-interactive).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
error:
       … while evaluating the attribute 'foundation.outPath.outPath'
         at /data/dev/auxolotl/labs/tidepool/npins/default.nix:67:15:
           66|     in
           67|     spec // { outPath = mayOverride name path; };
             |               ^
           68|

       … while evaluating an expression to select 'outPath' on it
         at «string»:1:25:
            1| t: t.foundation.outPath.outPath
             |                         ^

       (stack trace truncated; use '--show-trace' to show the full trace)

       error: program 'git' failed with exit code 128
((2c19b9ff))[1]❯ nix-store --gc --print-dead
finding garbage collector roots...
determining live/dead paths...
((2c19b9ff))❯ git switch fix/npins-https-sources
Previous HEAD position was 2c19b9f refactor: enable system build info assertions
Switched to branch 'fix/npins-https-sources'
(fix/npins-https-sources)❯ nix eval --no-eval-cache -f tidepool/npins --raw --apply 't: t.foundation.outPath.outPath'
/nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87⏎                                                                         (fix/npins-https-sources)❯ nix-store --gc --print-dead
finding garbage collector roots...
determining live/dead paths...
/nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87
I still to test it *does* solve it. I have trouble fully replicating the issue :x Edit: I think this confirms it ``` ((2c19b9ff))❯ nix-store --gc finding garbage collector roots... deleting garbage... deleting '/nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87' deleting '/nix/store/c91q5c8yvs0phnpr47sapcnhgjh8c9zj-lib.git-c55943c' deleting unused links... note: currently hard linking saves 2895.04 MiB 2 store paths deleted, 0.61 MiB freed ((2c19b9ff))❯ nix eval --no-eval-cache -f tidepool/npins --raw --apply 't: t.foundation.outPath.outPath' forgejo@git.auxolotl.org: Permission denied (publickey,keyboard-interactive). fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. warning: could not read HEAD ref from repo at 'git+ssh://forgejo@git.auxolotl.org/auxolotl/foundation.git', using 'master' fetching Git repository 'git+ssh://forgejo@git.auxolotl.org/auxolotl/foundation.git'forgejo@git.auxolotl.org: Permission denied (publickey,keyboard-interactive). fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. error: … while evaluating the attribute 'foundation.outPath.outPath' at /data/dev/auxolotl/labs/tidepool/npins/default.nix:67:15: 66| in 67| spec // { outPath = mayOverride name path; }; | ^ 68| … while evaluating an expression to select 'outPath' on it at «string»:1:25: 1| t: t.foundation.outPath.outPath | ^ (stack trace truncated; use '--show-trace' to show the full trace) error: program 'git' failed with exit code 128 ((2c19b9ff))[1]❯ nix-store --gc --print-dead finding garbage collector roots... determining live/dead paths... ((2c19b9ff))❯ git switch fix/npins-https-sources Previous HEAD position was 2c19b9f refactor: enable system build info assertions Switched to branch 'fix/npins-https-sources' (fix/npins-https-sources)❯ nix eval --no-eval-cache -f tidepool/npins --raw --apply 't: t.foundation.outPath.outPath' /nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87⏎ (fix/npins-https-sources)❯ nix-store --gc --print-dead finding garbage collector roots... determining live/dead paths... /nix/store/rzq9fz84ds4sphkls5r9f0pckcsz7cqz-foundation.git-ec6ba87 ```
austreelis changed title from WIP: Fix: permission denied when fetching repo via npins to Fix: permission denied when fetching repo via npins 2025-09-03 10:36:44 +00:00
Owner

We may also need to do the same for the foundation repo's pins. Thanks for making this PR!

We may also need to do the same for the foundation repo's pins. Thanks for making this PR!
jakehamilton merged commit 913b94f06a into main 2025-09-03 14:23:20 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: auxolotl/labs#17
No description provided.