Skip to content

Commit 425e37f

Browse files
committed
Remove creation of SSH keys of type DSA to prevent cluster creation failure
when the OS ships a version of OpenSSH that does not support DSA keys.
1 parent eed2d24 commit 425e37f

File tree

3 files changed

+2
-7
lines changed

3 files changed

+2
-7
lines changed

CHANGELOG.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ aws-parallelcluster-cookbook CHANGELOG
22
======================================
33

44
This file is used to list changes made in each version of the AWS ParallelCluster cookbook.
5+
56
3.13.0
67
------
78

@@ -18,6 +19,7 @@ This file is used to list changes made in each version of the AWS ParallelCluste
1819
- yum-epel-5.0.8 (from yum-epel-5.0.2)
1920
- Upgrade Pmix to 5.0.6 (from 5.0.3).
2021
- Upgrade ARM PL to version 24.10 (from 23.10).
22+
- Remove generation of DSA keys for login nodes as DSA, which became unsupported in OpenSSH 9.7+.
2123

2224
3.12.0
2325
------

cookbooks/aws-parallelcluster-environment/files/login_nodes/keys-manager.sh

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,6 @@ function create_keys() {
3838
ssh-keygen -t ecdsa -f "$FOLDER_PATH/ssh_host_ecdsa_key" -q -P ""
3939
ssh-keygen -t ed25519 -f "$FOLDER_PATH/ssh_host_ed25519_key" -q -P ""
4040
ssh-keygen -t rsa -f "$FOLDER_PATH/ssh_host_rsa_key" -q -P ""
41-
if is_ubuntu; then
42-
ssh-keygen -t dsa -f "$FOLDER_PATH/ssh_host_dsa_key" -q -P ""
43-
fi
4441
}
4542

4643
function import_keys() {
@@ -50,7 +47,6 @@ function import_keys() {
5047
cp "$FOLDER_PATH/ssh_host_ed25519"* /etc/ssh/
5148
cp "$FOLDER_PATH/ssh_host_rsa"* /etc/ssh/
5249
if is_ubuntu; then
53-
cp "$FOLDER_PATH/ssh_host_dsa"* /etc/ssh/
5450
chown root:root /etc/ssh/ssh_host_*
5551
chmod 600 /etc/ssh/ssh_host_*_key
5652
else

cookbooks/aws-parallelcluster-environment/test/controls/login_nodes_keys_spec.rb

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,6 @@
1111

1212
key_types = %w(ecdsa ed25519 rsa)
1313
is_ubuntu = os_properties.ubuntu?
14-
if is_ubuntu
15-
key_types << 'dsa'
16-
end
1714

1815
control 'head_node_directory_initialized' do
1916
only_if { instance.head_node? && node['cluster']['scheduler'] != 'awsbatch' }

0 commit comments

Comments
 (0)