Hi all,

I've been going through the pull requests on github, and this request was
opened in March: https://github.com/ganeti/ganeti/pull/24

I've tidied it up a bit to apply against 2.16 and fixed a couple of bugs on the
way, but the patch as it stands has a bit of the problem. Ganeti seems to assume
that all the keytypes supported by the RPC calls can be used for user keys and
also that the host OS has generated host keys for each of these keytypes.

However Ed25519 support was only added in OpenSSH 6.5, and Debian 7.0 is on
OpenSSH 6.0, and therefore it doesn't have Ed25519 host keys.

So on the one hand, we'd like to continue supporting Debian 7.0 for a while,
but on the other we'd like to add Ed25519 support for Debian 8.0.

I was thinking that perhaps Ganeti should autoprobe for supported key types at
startup using 'ssh -Q key', and use that to populate a runtime list of allowable
keytypes, and complain if the user tries to use an unsupported one.

However, I'm almost completely unfamiliar with this part of Ganeti. Would
anyone be interested in taking this on?

The patchset so far is...
Aaron Zauner (1):
  Add Ed25519 SSH Key Type support (disabled for hostkey currently)

 lib/ssh.py                                         |  3 +++
 src/Ganeti/Constants.hs                            | 13 ++++++++++++-
 src/Ganeti/Types.hs                                |  1 +
 test/hs/Test/Ganeti/Objects.hs                     |  1 +
 test/py/ganeti.ssh_unittest.py                     |  8 ++++++++
 test/py/ganeti.tools.prepare_node_join_unittest.py | 12 ++++++++++++
 6 files changed, 37 insertions(+), 1 deletion(-)

-- 
2.8.0.rc3.226.g39d4020

Reply via email to