rhtyd commented on pull request #4069:
URL: https://github.com/apache/cloudstack/pull/4069#issuecomment-629733078


   @weizhouapache (cc @shwstppr @davidjumani - perhaps check on CentOS8 the 
version of openssh-server/sshd) I found that openssh-server v7+ per their 
release notes has deprecated some options that our SSH utility/class uses 
(needs investigation) which is why CloudStack fails to ssh into KVM host for 
newer distros, to fix it I had to add the following to the sshd config:
   ```
   PubkeyAcceptedKeyTypes=+ssh-dss
   HostKeyAlgorithms=+ssh-dss 
   KexAlgorithms=+diffie-hellman-group1-sha1
   ```
   
   For reference, my test env:
   ```
   # lsb_release -d && ssh -V
   Description: Ubuntu 20.04 LTS
   OpenSSH_8.2p1 Ubuntu-4, OpenSSL 1.1.1f  31 Mar 2020
   ```


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to