[pve-devel] [PATCH container v2 1/3] setup: remove deprecated dsa from ssh host key generation

[Lukas Wagner]

On  2025-07-16 13:36, Lukas Wagner wrote:
> 
> 
> On  2025-07-04 20:23, Daniel Kral wrote:
>> OpenSSH 10.0 removes support for the DSA signature algorithm [0], which
>> is the base version that will be shipped for Debian 13 trixie. Since it
>> has been marked deprecated for some time and generating DSA signatures
>> with OpenSSH 10.0 will fail, remove it.
>>
>> [0] https://www.openssh.com/txt/release-10.0
>> [1] https://www.debian.org/releases/trixie/release-notes/whats-new.en.html
>>
>> Signed-off-by: Daniel Kral <d.kral at proxmox.com>
> 
> 
> Creating a Debian 12 container on PVE 9 does not work at the moment due this error during container creation:
> 
>       Creating SSH host key 'ssh_host_dsa_key' - this may take some time ... unknown key type dsa
> 
> I can confirm that this patch makes it work again, so consider this:
> 
> Tested-by: Lukas Wagner <l.wagner at proxmox.com>
> 

Meh, was tricked by Thunderbird's search function and didn't see the other two patches of this series.
The T-b only applies for the first patch for now...

-- 
- Lukas