canonical / canonical/spread

Unable to connect to sshd 10 in Gentoo

Open
#243 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
127
Forks
81
PR merge metrics
No merged PRs in 30d

Description

There are no common crypto algorithms:

```
2025-06-24 16:33:05 Allocated garden:gentoo-cloud.
2025-06-24 16:33:05 Connecting to garden:gentoo-cloud...
2025-06-24 16:33:25 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:33:25 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:33:29 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:33:37 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:33:45 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:33:53 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:34:01 Cannot connect to garden:gentoo-cloud: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
2025-06-24 16:34:05 Discarding garden:gentoo-cloud, cannot connect: cannot connect to garden:gentoo-cloud: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain
```

Gentoo uses sshd 10. Ssh from Ubuntu 25.05 CAN connect.

Having looked at the code I suspect we need to stop using default selection of algorithms and instead enable all of the insecure algorithms AND the default algorithms together. This will fix newer systems without breaking old systems.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.