Last active
January 2, 2021 12:54
-
-
Save grahamc/36cf94fd25ee3121863a4c3811da5eb5 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: possibly transient failure building ‘/nix/store/nsndixd4v68nalzxp8c17pir6wfdlbc6-vm-test-run-sanoid.drv’ on ‘root@945ee45f.packethost.net’: error: --- Error --- hydra-queue-runner | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: cannot connect to ‘root@945ee45f.packethost.net’: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: The ED25519 host key for 945ee45f.packethost.net has changed, | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: and the key for the corresponding IP address 2604:1380:0:d600::5 | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: is unknown. This could either mean that | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: DNS SPOOFING is happening or the IP address for the host | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: and its host key have changed at the same time. | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: Someone could be eavesdropping on you right now (man-in-the-middle attack)! | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: It is also possible that a host key has just been changed. | |
-- | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: ED25519 host key for 945ee45f.packethost.net has changed and you have requested strict checking. | |
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: Host key verification failed. | |
[root@ceres:~]# ssh-keyscan -t ed25519 945ee45f.packethost.net 2604:1380:0:d600::5 | |
# 945ee45f.packethost.net:22 SSH-2.0-OpenSSH_8.4 | |
945ee45f.packethost.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA | |
# 2604:1380:0:d600::5:22 SSH-2.0-OpenSSH_8.4 | |
2604:1380:0:d600::5 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA | |
[root@ceres:~]# ssh-keyscan -t ed25519 945ee45f.packethost.net 2604:1380:0:d600::5 | |
# 945ee45f.packethost.net:22 SSH-2.0-OpenSSH_8.4 | |
945ee45f.packethost.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA | |
# 2604:1380:0:d600::5:22 SSH-2.0-OpenSSH_8.4 | |
2604:1380:0:d600::5 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA | |
[root@ceres:~]# sudo -u hydra-queue-runner -g hydra cat /var/lib/hydra-packet-import/machines | grep 945ee | |
root@945ee45f.packethost.net x86_64-linux,i686-linux /var/lib/hydra/queue-runner/.ssh/id_buildfarm_rsa 24 3 kvm,nixos-test - c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUF5NmZ4Ry8wMzFUWERkMVlvejB2RVh5T1JUd0dsd29GV1RQbVZRVEpaakE= | |
[root@ceres:~]# echo "c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUF5NmZ4Ry8wMzFUWERkMVlvejB2RVh5T1JUd0dsd29GV1RQbVZRVEpaakE=" | base64 -d | |
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA | |
https://github.com/NixOS/hydra/blob/73dfef364bb7b8eff43e435a30fd2fe1cc3350db/src/hydra-queue-runner/build-remote.cc#L59-L68 | |
[root@ceres:~]# systemctl cat hydra-queue-runner.service | |
# /nix/store/axzf3d3znnf30x2hkcd49ggzra1h1jwc-unit-hydra-queue-runner.service/hydra-queue-runner.service | |
[Unit] | |
After=hydra-init.service network.target | |
X-Restart-Triggers=/nix/store/xz5lk0yndrqhv53915cnhlnmy7zbg4rc-hydra.conf | |
[Service] | |
Environment="NIX_REMOTE_SYSTEMS=/var/lib/hydra-packet-import/machines:/etc/nix/machines" <---- changed | |
X-RestartIfChanged=false <- not restarted |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment