[
https://issues.apache.org/jira/browse/GUACAMOLE-1461?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17446249#comment-17446249
]
Mike Jumper commented on GUACAMOLE-1461:
----------------------------------------
Welp, unfortunately simply switching to Debian stable breaks the current image
with respect to the FreeRDP plugins (see
https://github.com/apache/guacamole-server/pull/348), so I've had to roll back
the Jenkins build and the {{guacamole/guacd:latest}} image. If you are
primarily using SSH or you are not relying on RDP features that involve FreeRDP
plugins (sound, file transfer, printing) you can safely use your own build of
the image that has been manually pointed to your Debian of choice or build from
source locally.
I'll close this as a duplicate of GUACAMOLE-1447, which is specifically about
updating the guacd Docker image and will inherently update libssh2 as a result.
If you have any further feedback on updating the Docker image, please join us
on GUACAMOLE-1447.
> Include libssh2 1.9.0 or later in guacd Docker image
> ----------------------------------------------------
>
> Key: GUACAMOLE-1461
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1461
> Project: Guacamole
> Issue Type: Improvement
> Components: guacd-docker
> Reporter: Patrick Young
> Priority: Major
> Attachments: CleanShot 2021-11-18 at [email protected],
> image-2021-11-18-14-26-03-940.png, image-2021-11-18-14-27-02-502.png,
> ssh-debug.pcap
>
>
> libssh2 has recently grown support for elliptic curve cryptography, including
> support for elliptic curve KEX algorithms. The current guacd Docker image
> doesn't inherit this support, however, because it uses Debian Buster as its
> base image. To have access to a newer libssh2, the guacd image will need to
> use at least Debian Bullseye.
> It may be worth updating the image to simply point at Debian stable, assuming
> there is no longer any issue with the FreeRDP version included by that
> version of Debian. Meanwhile, the Jenkins build that performs nightly
> rebuilds of the established Docker images for the previous release can simply
> be updated to point to Debian Bullseye with its build args and thus magically
> become up-to-date.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
