test-kitchen/kitchen-ec2

Fedora never connects to SSH

tas50 opened this issue · 4 comments

tas50 commented

Something is wrong with the Fedora AMIs. I'm not sure if they have sshd started when they come up. They never login so this is totally broken.

@tas50 I've been playing with CentOS 9 Stream with Test Kitchen. /var/log/secure is showing

Dec  7 20:01:37 localhost sshd[14640]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]

Manual ssh -i aws.key ec2-user@ip works.

Possibly related?

Adding ssh-rsa to PubkeyAcceptedAlgorithms list in /etc/crypto-policies/back-ends/opensshserver.config permits kitchen create to complete and kitchen login work after an sshd restart

FYI

As of Ubuntu 22.04, ssh-rsa will also be removed form the PubkeyAcceptedAlgorithms so the driver needs to add support for ECDSA

Would be resolved by #583 with a blip of config