You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you want to use an executable in lollypops.deployment.ssh.command, lollypops.extraTasks.<name>.cmds or lollypops.secrets.files.<name>.cmd, you have two options:
Simply use the name of the executable, e.g. ssh. This requires the executable to be in the PATH of the local machine.
Use the pkgs of the remote machine, e.g. ${pkgs.openssh}/bin/ssh. This requires the pkgs of the remote machine to be similarly configured to the one of the local machine. Notably, the local and remote machine needs to be the same system.
Example use case where it's not convinient: some of the secret files I have are generated with ${pkgs.bind}/bin/tsig-keygen. Unlike ssh, bind isn't a package I have available on all the machines I'm deploying from, so I set the full path, but now I can't create secrets on my aarch64 laptop (nor my phone... theorically, I'm I haven't gone in this rabbit hole yet).
I'm thinking a way to fix that would be to make those option accept an other type from string: a function, that take the pkgs of the local machine (passed with the lollypops app) as an argument (probably a dict, so we can add more things if needed later). I would be fine with implementing that myself, but first, does it make sense?
The text was updated successfully, but these errors were encountered:
GeoffreyFrogeye
changed the title
Cannot use machine's pkgs for password commands / custom taks
Cannot use machine's pkgs for secrets commands / custom tasks
Apr 14, 2024
If you want to use an executable in
lollypops.deployment.ssh.command
,lollypops.extraTasks.<name>.cmds
orlollypops.secrets.files.<name>.cmd
, you have two options:ssh
. This requires the executable to be in the PATH of the local machine.pkgs
of the remote machine, e.g.${pkgs.openssh}/bin/ssh
. This requires thepkgs
of the remote machine to be similarly configured to the one of the local machine. Notably, the local and remote machine needs to be the same system.Example use case where it's not convinient: some of the secret files I have are generated with
${pkgs.bind}/bin/tsig-keygen
. Unlikessh
,bind
isn't a package I have available on all the machines I'm deploying from, so I set the full path, but now I can't create secrets on myaarch64
laptop (nor my phone... theorically, I'm I haven't gone in this rabbit hole yet).I'm thinking a way to fix that would be to make those option accept an other type from string: a function, that take the
pkgs
of the local machine (passed with thelollypops
app) as an argument (probably a dict, so we can add more things if needed later). I would be fine with implementing that myself, but first, does it make sense?The text was updated successfully, but these errors were encountered: