Builds abort with RemoteStore::addToStore() not implemented

[pikajude]

See https://hydra.jude.bio/build/1700#tabs-buildsteps

Using hydra @ 7221bd7 and nix @ edf9eb8181e01f6b2123e5690019cfeeb44fc1c2

[domenkozar]

cc @edolstra

[edolstra]

@pikajude You could apply NixOS/nix#1053, it implements RemoteStore::addToStore.

[pikajude]

@edolstra that now causes all builds to fail with messages like this:

Oct 12 11:59:12 web hydra-queue-runner[5651]: possibly transient failure building ‘/nix/store/cz5wqqfv20w2r6i2pgvbd6xyypzs68j0-autogen-5.18.7.drv’ on ‘localhost’: cannot import path ‘/nix/store/10rs5p8rfa45p9ljjm9mpxf3n43hi7bn-autogen-5.18.7-man’ because it lacks a valid signature

[copumpkin]

@pikajude that's probably worth posting to NixOS/nix#1053, since otherwise @shlevy won't see it (except that I just highlighted him now)

[shlevy]

@pikajude Do you have nix updated on both ends?

[pikajude]

@shlevy hydra only uses localhost for builds, and the nix.package I'm using is the same one that hydra is using.

[shlevy]

Oh, wait. This is expected. You need to either sign your paths or be a trusted daemon user to addToStore.

[shlevy]

I'm confused as to why this is even happening at all. @edolstra did you change hydra recently to require my PR?

[pikajude]

@shlevy Agreed. In nix master, addToStore has been unimplemented since May 4, and Hydra worked without interference between then and now.

[edolstra]

It's using addToStore implicitly since ee2e9f5.

[shlevy]

@edolstra So is the solution here to always turn on build signing?

[pikajude]

@shlevy if that's the case, how do I turn on build signing?