Skip to content

ENT-14407: Replaced ssh-keyscan with reading host keys in federation setup status (3.27.x) - #3241

Merged
larsewi merged 1 commit into
3.27.xfrom
backport-3237-3.27.x
Nov 11, 2026
Merged

larsewi merged 1 commit into
3.27.xfrom
backport-3237-3.27.x

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Backport of #3237 by @larsewi to 3.27.x.

Opened automatically by .github/workflows/backport.yml.

Pull requests opened with GITHUB_TOKEN do not trigger other workflows, so CI has not started on its own.

OpenSSH 9.8+ PerSourcePenalties penalise repeated ssh-keyscan
connections from localhost, so the scan often returned nothing and setup
status was not written. Host key paths now come from sshd -T and the
public keys are read from disk.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Ticket: ENT-14407
Changelog: Federation setup status no longer fails to collect the SSH host key fingerprint on OpenSSH 9.8+
Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
(cherry picked from commit 05a2ee0)
@larsewi

larsewi commented Nov 10, 2026

Copy link
Copy Markdown
Contributor

@cf-bottom Jenkins please :)

@cf-bottom

Copy link
Copy Markdown

@larsewi
larsewi merged commit f1bf44e into 3.27.x Nov 11, 2026
41 checks passed
@larsewi
larsewi deleted the backport-3237-3.27.x branch November 11, 2026 10:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants