This is an automated email from the ASF dual-hosted git repository.

rohit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cloudstack-documentation.git


The following commit(s) were added to refs/heads/master by this push:
     new e09b6a3  releasenotes: add workaround for adding KVM hosts with latest 
openssh (#146)
e09b6a3 is described below

commit e09b6a3790cbc771298561166433a1ccced5432c
Author: Rohit Yadav <[email protected]>
AuthorDate: Wed Sep 9 14:37:08 2020 +0530

    releasenotes: add workaround for adding KVM hosts with latest openssh (#146)
    
    Signed-off-by: Rohit Yadav <[email protected]>
---
 source/releasenotes/about.rst | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/source/releasenotes/about.rst b/source/releasenotes/about.rst
index 21a4671..56359a9 100644
--- a/source/releasenotes/about.rst
+++ b/source/releasenotes/about.rst
@@ -61,6 +61,20 @@ Libvirt Python Dependency on KVM and CentOS
 
 For CentOS users using the security groups feature on KVM it is needed to 
install the epel-release and python36-libvirt packages.
 
+Workaround for adding newer KVM hosts
+=====================================
+
+Newer GNU/Linux distributions with latest OpenSSH package disables some older
+SSH algorithms and ciphers and newer algorithms are not supported by 
trilead-ssh
+library used by CloudStack to SSH into KVM hosts during the host-add operation.
+Until the dependency library can support that users can use the following
+workaround in their KVM host's /etc/ssh/sshd_config and restart ssh server
+before adding the KVM host in CloudStack:
+
+   PubkeyAcceptedKeyTypes=+ssh-dss
+   HostKeyAlgorithms=+ssh-dss
+   KexAlgorithms=+diffie-hellman-group1-sha1
+
 New User Interface & Depreciation notice of existing UI
 =======================================================
 

Reply via email to