Deploy Nix config remotely

[samhh]

I'd like to be able to do this:

# nixos-rebuild --flake ".#tentacool" --target-host sam@tentacool switch

It connects over SSH and starts copying until if fails with:

copying path '/nix/store/0ab7s7la2i4nkfa645prjn19lrx80r6y-linux-5.15.43-modules-shrunk' to 'ssh://sam@tentacool'...
error: cannot add path '/nix/store/0ab7s7la2i4nkfa645prjn19lrx80r6y-linux-5.15.43-modules-shrunk' because it lacks a valid signature

[samhh]

There's a permissions error with --build-host localhost. There's --use-remote-sudo, however this doesn't appear to support doas.

[samhh]

NixOS/nixpkgs#169193 (comment)

[samhh]

a18deef

The following now appears to work:

$ NIX_SSHOPTS="-t" nixos-rebuild switch --flake ".#tentacool" --target-host sam@tentacool --use-remote-sudo

The ssh -t bit was described here: https://discourse.nixos.org/t/which-commands-are-required-for-remote-switch/17936/2

Edit: This no longer works...

[samhh]

Something declarative and which doesn't require entering the remote's password would be ideal.

[samhh]

Another option is Cachix Deploy:

• https://blog.cachix.org/posts/2022-07-29-cachix-deploy-public-beta/
• https://discourse.nixos.org/t/cachix-deploy-public-beta/20641/5

[samhh]

deploy-rs is worth trying again: serokell/deploy-rs#207

[samhh]

8840013