Skip to content

Support ed25519 ssh keys for deployment #1613

@ianheggie-oaf

Description

@ianheggie-oaf

Description

Gemfile doesnt have required gems to allow ed25519 ssh keys to be used for deployment.

Describe the solution you'd like

Add required gems

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context

Discovered whilst doing a final check of a batch of dependabot security PRs before deploying to production.

Tested by deploying to staging.

$ make deploy-staging
bundle exec cap staging deploy
#<Thread:0x000073430cfec0f0 /home/ianh/.local/share/mise/installs/ruby/3.4.4/lib/ruby/gems/3.4.0/gems/sshkit-1.24.0/lib/sshkit/runners/parallel.rb:8 run> terminated with exception (report_on_exception is true):
/home/ianh/.local/share/mise/installs/ruby/3.4.4/lib/ruby/gems/3.4.0/gems/net-ssh-7.3.0/lib/net/ssh/authentication/ed25519_loader.rb:19:in 'Net::SSH::Authentication::ED25519Loader.raiseUnlessLoaded': unsupported key type `ssh-ed25519' (NotImplementedError)
net-ssh requires the following gems for ed25519 support:
 * ed25519 (>= 1.2, < 2.0)
 * bcrypt_pbkdf (>= 1.0, < 2.0)
See https://github.com/net-ssh/net-ssh/issues/565 for more information
Gem::LoadError : "ed25519 is not part of the bundle. Add it to your Gemfile."

Metadata

Metadata

Assignees

Labels

devopsDeployment automationreliabilityIncrease reliability by reducing complexity, technical debt and increasing monitoring, robustnesssecurityProtect systems and user data from vulnerabilities and unauthorised access
No fields configured for Feature.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions