Skip to content

Instantly share code, notes, and snippets.

@grahamc
Last active January 2, 2021 12:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save grahamc/36cf94fd25ee3121863a4c3811da5eb5 to your computer and use it in GitHub Desktop.
Save grahamc/36cf94fd25ee3121863a4c3811da5eb5 to your computer and use it in GitHub Desktop.
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: possibly transient failure building ‘/nix/store/nsndixd4v68nalzxp8c17pir6wfdlbc6-vm-test-run-sanoid.drv’ on ‘root@945ee45f.packethost.net’: error: --- Error --- hydra-queue-runner
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: cannot connect to ‘root@945ee45f.packethost.net’: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: The ED25519 host key for 945ee45f.packethost.net has changed,
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: and the key for the corresponding IP address 2604:1380:0:d600::5
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: is unknown. This could either mean that
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: DNS SPOOFING is happening or the IP address for the host
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: and its host key have changed at the same time.
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: Someone could be eavesdropping on you right now (man-in-the-middle attack)!
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: It is also possible that a host key has just been changed.
--
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: ED25519 host key for 945ee45f.packethost.net has changed and you have requested strict checking.
Jan 02 13:05:31 ceres hydra-queue-runner[8073]: Host key verification failed.
[root@ceres:~]# ssh-keyscan -t ed25519 945ee45f.packethost.net 2604:1380:0:d600::5
# 945ee45f.packethost.net:22 SSH-2.0-OpenSSH_8.4
945ee45f.packethost.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA
# 2604:1380:0:d600::5:22 SSH-2.0-OpenSSH_8.4
2604:1380:0:d600::5 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA
[root@ceres:~]# ssh-keyscan -t ed25519 945ee45f.packethost.net 2604:1380:0:d600::5
# 945ee45f.packethost.net:22 SSH-2.0-OpenSSH_8.4
945ee45f.packethost.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA
# 2604:1380:0:d600::5:22 SSH-2.0-OpenSSH_8.4
2604:1380:0:d600::5 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA
[root@ceres:~]# sudo -u hydra-queue-runner -g hydra cat /var/lib/hydra-packet-import/machines | grep 945ee
root@945ee45f.packethost.net x86_64-linux,i686-linux /var/lib/hydra/queue-runner/.ssh/id_buildfarm_rsa 24 3 kvm,nixos-test - c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUF5NmZ4Ry8wMzFUWERkMVlvejB2RVh5T1JUd0dsd29GV1RQbVZRVEpaakE=
[root@ceres:~]# echo "c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUF5NmZ4Ry8wMzFUWERkMVlvejB2RVh5T1JUd0dsd29GV1RQbVZRVEpaakE=" | base64 -d
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAy6fxG/031TXDd1Yoz0vEXyORTwGlwoFWTPmVQTJZjA
https://github.com/NixOS/hydra/blob/73dfef364bb7b8eff43e435a30fd2fe1cc3350db/src/hydra-queue-runner/build-remote.cc#L59-L68
[root@ceres:~]# systemctl cat hydra-queue-runner.service
# /nix/store/axzf3d3znnf30x2hkcd49ggzra1h1jwc-unit-hydra-queue-runner.service/hydra-queue-runner.service
[Unit]
After=hydra-init.service network.target
X-Restart-Triggers=/nix/store/xz5lk0yndrqhv53915cnhlnmy7zbg4rc-hydra.conf
[Service]
Environment="NIX_REMOTE_SYSTEMS=/var/lib/hydra-packet-import/machines:/etc/nix/machines" <---- changed
X-RestartIfChanged=false <- not restarted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment