WIP: Add guide on using nix in marenostrum 5 #3

Draft
abonerib wants to merge 1 commits from mn5-guide into master
Collaborator

ssh does not like Incuding files owned by nobody, which breaks fetchgit:

$ nix build jungle#bench6 -L
Bad owner or permissions on /etc/ssh/ssh_config.d/50-redhat.conf
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists
<...>

$ nix run nixpkgs#bashInteractive --offline -- -c "ls -l /etc/ssh/ssh_config.d"
total 4
-rw-r--r-- 1 nobody nobody 581 Jul 24  2023 50-redhat.conf

I think we will have to either modify nix-portable to bind ssh_config.d to an empty dir or wrap it in another bwrap.


I have tried to update nix-portable to current nix version and restrict the binds that are done in nix-portable but there are still some rough edges until I can get it to work.

ssh does not like Incuding files owned by `nobody`, which breaks fetchgit: ```console $ nix build jungle#bench6 -L Bad owner or permissions on /etc/ssh/ssh_config.d/50-redhat.conf fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists <...> $ nix run nixpkgs#bashInteractive --offline -- -c "ls -l /etc/ssh/ssh_config.d" total 4 -rw-r--r-- 1 nobody nobody 581 Jul 24 2023 50-redhat.conf ``` I think we will have to either modify `nix-portable` to bind `ssh_config.d` to an empty dir or wrap it in another bwrap. --- I have tried to update `nix-portable` to current nix version and restrict the binds that are done in [nix-portable](https://jungle.bsc.es/git/abonerib/jungle/src/branch/nix-portable) but there are still some rough edges until I can get it to work.
abonerib added 1 commit 2026-03-05 16:53:21 +01:00
This pull request is marked as a work in progress.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin mn5-guide:mn5-guide
git checkout mn5-guide
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rarias/jungle-website#3