The `accessKey` required by GCE is a path relative to the current working directory

[P-E-Meunier]

When I set accessKey to "pkey.pem" in my GCE deployment file, nixops expect that file to be in the current working directory.

I believe this is wrong: that parameter should not be a string, but a path, and should be either absolute, or relative to the file where it is referenced from.

[disassembler]

What happens if you set it to accessKey = ./pkey.pem; (emphasis on no quotes and ./ at beginning)? In NixOS paths don't have quotes and the string a path is converted to is the absolute path the file specifed.

[P-E-Meunier]

Nixops complains it wants a string and not a path.

[disassembler]

Can you test #751 please? I don't have a gce account to verify it fixes your problem.

[P-E-Meunier]

Looks like a great fix, but I'm not sure how to test it.

[disassembler]

git clone https://github.com/NixOS/nixops
cd nixops
curl https://patch-diff.githubusercontent.com/raw/NixOS/nixops/pull/751.patch | git apply -v --index
nix-build release.nix -A build.x86_64-linux
nix-shell release.nix -A build.x86_64-linux --exclude tarball

Then do the same as you did before but use result/bin/nixops.

[P-E-Meunier]

Thanks!
So, now I get a different error:

error: option accessKey must be set

Edit: it still works fine with the string.

[disassembler]

Can you share a gist of your deployment files masking any secrets/information?

…

On Sun, Oct 29, 2017 at 10:21 AM Pierre-Etienne Meunier < ***@***.***> wrote: Thanks! So, now I get a different error: error: option accessKey must be set — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#750 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAnvxZTnnDkZzKxQBgfatv2hmJXrelAZks5sxEO2gaJpZM4QKOg8> .

[P-E-Meunier]

I guess the relevant parts are:

{ config, pkgs, lib, ... }:
let credentials = import ./gce_credentials; in
{
  deployment.targetEnv = "gce";
  deployment.targetPort = 22;
  deployment.gce = credentials // {
    machineName = "my-machine";
    region = "europe-west1-d";
    instanceType = "f1-micro";
    tags = [ "http-server" "https-server" "tag" ];
    ipAddress = "my-ip";
  };
}

And my gce-credentials.nix looks like:

{
  project = "xxxxxx";
  serviceAccount = "xxxxxx@developer.gserviceaccount.com";
  accessKey = ./pkey.pem;
}

[disassembler]

So after looking at it, it seems like the python code doesn't handle path variables very well... Can you try toString ./pkg.pem?