[pve-devel] [PATCH container v2 1/3] setup: remove deprecated dsa from ssh host key generation

[Lukas Wagner]

On  2025-07-04 20:23, Daniel Kral wrote:
> OpenSSH 10.0 removes support for the DSA signature algorithm [0], which
> is the base version that will be shipped for Debian 13 trixie. Since it
> has been marked deprecated for some time and generating DSA signatures
> with OpenSSH 10.0 will fail, remove it.
> 
> [0] https://www.openssh.com/txt/release-10.0
> [1] https://www.debian.org/releases/trixie/release-notes/whats-new.en.html
> 
> Signed-off-by: Daniel Kral <d.kral at proxmox.com>


Creating a Debian 12 container on PVE 9 does not work at the moment due this error during container creation:

      Creating SSH host key 'ssh_host_dsa_key' - this may take some time ... unknown key type dsa

I can confirm that this patch makes it work again, so consider this:

Tested-by: Lukas Wagner <l.wagner at proxmox.com>

-- 
- Lukas