README: update ssh pitfalls for sk-ssh-* keys and update mine. #163
Conversation
Janik-Haag
changed the title
|
|
||
| > unable to open SSH connection to | ||
| > 'ssh://[email protected]': cannot connect to | ||
| > '[email protected]'; trying other available | ||
| > machines... | ||
|
|
||
| You should also avoid keys generated with u2f-devices (f.e. yubikeys) like a sk-ssh-ed25519 since you have to press the presence button for every single package build on a remote server. |
There was a problem hiding this comment.
IIRC this isn't an issue if ControlMaster/ControlPersist ssh settings are used?
There was a problem hiding this comment.
It didn't work when setting them in my user ssh config, it might work when setting it system wide or for the root user, I can try that if you want me to.
|
Hope I can provide some useful input: You can generate FIDO ssh keys ( e.g. I am using keys like that for remote nix stuff in a few places. See https://man.openbsd.org/ssh-keygen.1#no-touch-required~2 |
I updated the README.md ssh-key part and decided to swap to a separate ssh-key for not trusted builders so I updated my key aswell. Sorry for the trouble.