[tor-bugs] #18786 [Tor Browser]: Gitian: Debian host needs non-dss ssh key

[Tor Bug Tracker & Wiki]

#18786: Gitian: Debian host needs non-dss ssh key
-------------------------+-----------------------------------
 Reporter:  dcf          |          Owner:  tbb-team
     Type:  defect       |         Status:  needs_information
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:  tbb-gitian   |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-----------------------------------

Comment (by dcf):

 `make alpha` doesn't work. I think I'm using KVM
 {{{
 + make-clean-vm --suite wheezy --arch i386
 Formatting 'target-wheezy-i386.qcow2', fmt=qcow2 size=17179869184
 backing_file=base-wheezy-i386.qcow2 encryption=off cluster_size=65536
 lazy_refcounts=off refcount_bits=16
 + '[' 0 -ne 0 ']'
 + stop-target 32 wheezy
 + for i in 1 2 3
 + sleep 2
 + start-target 32 wheezy-i386
 + on-target /bin/true
 debian at localhost's password:
 }}}
 Besides changing the key type to `ecdsa`, you can also do this in on-
 target:
 {{{
 -    ssh -oConnectTimeout=30 -oNoHostAuthenticationForLocalhost=yes -i
 ${GITIAN_BASE:-.}/var/id_dsa -p $VM_SSH_PORT $TUSER at localhost $*
 +    ssh -oConnectTimeout=30 -oNoHostAuthenticationForLocalhost=yes
 -oPubkeyAcceptedKeyTypes=+ssh-dss -i ${GITIAN_BASE:-.}/var/id_dsa -p
 $VM_SSH_PORT $TUSER at localhost $*
 }}}
 I'm pretty sure this has to do with the ssh on the host; i.e., it's the
 ssh on my laptop that is refusing to use ssh-dss by default.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18786#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online