{"action":"created","issue":{"url":"https://api.github.com/repos/NixOS/nix/issues/2161","repository_url":"https://api.github.com/repos/NixOS/nix","labels_url":"https://api.github.com/repos/NixOS/nix/issues/2161/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nix/issues/2161/comments","events_url":"https://api.github.com/repos/NixOS/nix/issues/2161/events","html_url":"https://github.com/NixOS/nix/issues/2161","id":322987778,"node_id":"MDU6SXNzdWUzMjI5ODc3Nzg=","number":2161,"title":"nix-shell and nix-store unable to access private S3 bucket","user":{"login":"Ralith","id":104558,"node_id":"MDQ6VXNlcjEwNDU1OA==","avatar_url":"https://avatars2.githubusercontent.com/u/104558?v=4","gravatar_id":"","url":"https://api.github.com/users/Ralith","html_url":"https://github.com/Ralith","followers_url":"https://api.github.com/users/Ralith/followers","following_url":"https://api.github.com/users/Ralith/following{/other_user}","gists_url":"https://api.github.com/users/Ralith/gists{/gist_id}","starred_url":"https://api.github.com/users/Ralith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ralith/subscriptions","organizations_url":"https://api.github.com/users/Ralith/orgs","repos_url":"https://api.github.com/users/Ralith/repos","events_url":"https://api.github.com/users/Ralith/events{/privacy}","received_events_url":"https://api.github.com/users/Ralith/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-05-14T21:25:57Z","updated_at":"2018-05-31T20:11:34Z","closed_at":null,"author_association":"NONE","body":"WIth `substituters = s3://bucket-name` and `trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= my-key-name:my-key=`, `nix copy --from s3://bucket-name /nix/store/foo` works, but `nix-store -r /nix/store/foo` fails with:\r\n```\r\nwarning: AWS error checking bucket 'bucket-name': Access Denied\r\ndon't know how to build these paths:\r\n  /nix/store/foo\r\n```\r\n\r\n`nix-shell` produces an identical `warning: AWS error checking bucket 'bucket-name': Access Denied` whenever it is ran, and locally builds derivations that it should instead be fetching from the cache."},"comment":{"url":"https://api.github.com/repos/NixOS/nix/issues/comments/393664382","html_url":"https://github.com/NixOS/nix/issues/2161#issuecomment-393664382","issue_url":"https://api.github.com/repos/NixOS/nix/issues/2161","id":393664382,"node_id":"MDEyOklzc3VlQ29tbWVudDM5MzY2NDM4Mg==","user":{"login":"bobvanderlinden","id":6375609,"node_id":"MDQ6VXNlcjYzNzU2MDk=","avatar_url":"https://avatars1.githubusercontent.com/u/6375609?v=4","gravatar_id":"","url":"https://api.github.com/users/bobvanderlinden","html_url":"https://github.com/bobvanderlinden","followers_url":"https://api.github.com/users/bobvanderlinden/followers","following_url":"https://api.github.com/users/bobvanderlinden/following{/other_user}","gists_url":"https://api.github.com/users/bobvanderlinden/gists{/gist_id}","starred_url":"https://api.github.com/users/bobvanderlinden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bobvanderlinden/subscriptions","organizations_url":"https://api.github.com/users/bobvanderlinden/orgs","repos_url":"https://api.github.com/users/bobvanderlinden/repos","events_url":"https://api.github.com/users/bobvanderlinden/events{/privacy}","received_events_url":"https://api.github.com/users/bobvanderlinden/received_events","type":"User","site_admin":false},"created_at":"2018-05-31T20:11:34Z","updated_at":"2018-05-31T20:11:34Z","author_association":"CONTRIBUTOR","body":"You might want to use `netrc-file` in the Nix configuration file (`/etc/nix/nix.conf`). That way the command-line tools as well as the daemon will use the same credentials for the builtin fetchurl. I'm not entirely sure whether the fetch that Nix is doing in your case is using `netrc-file` though, but it would be very helpful if all HTTPS traffic in Nix would make use of this file."}}
{"actor":{"display_login":"bobvanderlinden"}}