Project

General

Profile

Support #40705

Unable to lock teuthology machine due to SSH error.

Added by Sridhar Seshasayee over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
% Done:

0%

Tags:
Reviewed:
Affected Versions:

Description

My user ID is sseshasa and I recently set up vpn access to sepia lab.
I am getting the following error when I run teuthology-lock from teuthology.front.sepia.ceph.com

NOTE:
- I have copied the id_rsa.pub from my laptop to ~/.ssh directory on teuthology.front.sepia.ceph.com
- The above is the same key I submitted for getting vpn access.

Here's the error from the teuthology-lock command,

sseshasa@teuthology:~/teuthology$ ~/teuthology/virtualenv/bin/teuthology-lock --lock-many 1 --machine-type mira | tee ~/targets.yaml
2019-07-09 18:38:08,815.815 INFO:teuthology.provision.fog.mira061:Scheduling deploy of ubuntu 18.04
2019-07-09 18:38:09,084.084 INFO:teuthology.orchestra.console:Power off mira061
2019-07-09 18:38:17,457.457 INFO:teuthology.orchestra.console:Power off for mira061 completed
2019-07-09 18:38:17,558.558 INFO:teuthology.orchestra.console:Power on mira061
2019-07-09 18:38:25,925.925 INFO:teuthology.orchestra.console:Power on for mira061 completed
2019-07-09 18:38:26,026.026 INFO:teuthology.provision.fog.mira061:Waiting for deploy to finish
/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/ecdsakey.py:164: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
self.ecdsa_curve.curve_class(), pointinfo
2019-07-09 18:43:04,912.912 ERROR:paramiko.transport:Socket exception: Connection reset by peer (104)
2019-07-09 18:43:19,994.994 ERROR:paramiko.transport:Socket exception: Connection reset by peer (104)
/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
m.add_string(self.Q_C.public_numbers().encode_point())
/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
self.curve, Q_S_bytes
/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.
hm.add_string(self.Q_C.public_numbers().encode_point())
/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/cryptography/hazmat/backends/openssl/ciphers.py:114: UserWarning: implicit cast from 'char *' to a different pointer type: will be forbidden in the future (check that the types are as you expect; use an explicit ffi.cast() if they are correct)
operation
2019-07-09 18:44:26,356.356 ERROR:paramiko.transport:Exception: Error reading SSH protocol banner
2019-07-09 18:44:26,356.356 ERROR:paramiko.transport:Traceback (most recent call last):
2019-07-09 18:44:26,356.356 ERROR:paramiko.transport: File "/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/transport.py", line 1966, in run
2019-07-09 18:44:26,357.357 ERROR:paramiko.transport: self._check_banner()
2019-07-09 18:44:26,357.357 ERROR:paramiko.transport: File "/home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/transport.py", line 2143, in _check_banner
2019-07-09 18:44:26,357.357 ERROR:paramiko.transport: "Error reading SSH protocol banner" + str(e)
2019-07-09 18:44:26,357.357 ERROR:paramiko.transport:SSHException: Error reading SSH protocol banner

The above SSH protocol banner error keeps showing up in a loop. I tried running the above command multiple times but get the same error.
I suspect something is wrongly configured. Therefore, I am not certain if this is a bug and am raising a support ticket.

Please let me know if my configuration is proper and how to fix this.

Thanks!

-Sridhar

History

#1 Updated by yite gu over 4 years ago

I have same problem,my keytype is ssh-ed25519 when I create new node.

2019-07-22 05:41:51,764.764 INFO:create_nodes.py:Creating plana031.easystack.cn 2019-07-22 05:41:51,764.764 INFO:teuthology.orchestra.remote:Trying to reconnect to host /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/paramiko/ecdsakey.py:164: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point self.ecdsa_curve.curve_class(), pointinfo /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:39: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding. m.add_string(self.Q_C.public_numbers().encode_point()) /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:96: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point self.curve, Q_S_bytes /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/paramiko/kex_ecdh_nist.py:111: CryptographyDeprecationWarning: encode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding. hm.add_string(self.Q_C.public_numbers().encode_point()) /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/cryptography/hazmat/backends/openssl/ciphers.py:114: UserWarning: implicit cast from 'char *' to a different pointer type: will be forbidden in the future (check that the types are as you expect; use an explicit ffi.cast() if they are correct) operation /home/teuthology/teuthology/virtualenv/lib/python2.7/site-packages/cryptography/hazmat/backends/openssl/ciphers.py:140: UserWarning: implicit cast from 'char *' to a different pointer type: will be forbidden in the future (check that the types are as you expect; use an explicit ffi.cast() if they are correct) self._backend._ffi.from_buffer(data), len(data) 2019-07-22 05:41:51,927.927 INFO:teuthology.orchestra.run.plana031:Running: 2019-07-22 05:41:51,928.928 INFO:teuthology.orchestra.run.plana031:> true 2019-07-22 05:41:52,010.010 INFO:teuthology.orchestra.run.plana031:Running: 2019-07-22 05:41:52,010.010 INFO:teuthology.orchestra.run.plana031:> uname -m 2019-07-22 05:41:52,092.092 INFO:teuthology.orchestra.run.plana031.stdout:x86_64 2019-07-22 05:41:52,093.093 INFO:teuthology.orchestra.run.plana031:Running: 2019-07-22 05:41:52,093.093 INFO:teuthology.orchestra.run.plana031:> cat /etc/os-release 2019-07-22 05:41:52,175.175 INFO:teuthology.orchestra.run.plana031.stdout:NAME="CentOS Linux" 2019-07-22 05:41:52,176.176 INFO:teuthology.orchestra.run.plana031.stdout:VERSION="7 (Core)" 2019-07-22 05:41:52,176.176 INFO:teuthology.orchestra.run.plana031.stdout:ID="centos" 2019-07-22 05:41:52,176.176 INFO:teuthology.orchestra.run.plana031.stdout:ID_LIKE="rhel fedora" 2019-07-22 05:41:52,177.177 INFO:teuthology.orchestra.run.plana031.stdout:VERSION_ID="7" 2019-07-22 05:41:52,177.177 INFO:teuthology.orchestra.run.plana031.stdout:PRETTY_NAME="CentOS Linux 7 (Core)" 2019-07-22 05:41:52,177.177 INFO:teuthology.orchestra.run.plana031.stdout:ANSI_COLOR="0;31" 2019-07-22 05:41:52,177.177 INFO:teuthology.orchestra.run.plana031.stdout:CPE_NAME="cpe:/o:centos:centos:7" 2019-07-22 05:41:52,178.178 INFO:teuthology.orchestra.run.plana031.stdout:HOME_URL="https://www.centos.org/" 2019-07-22 05:41:52,178.178 INFO:teuthology.orchestra.run.plana031.stdout:BUG_REPORT_URL="https://bugs.centos.org/" 2019-07-22 05:41:52,178.178 INFO:teuthology.orchestra.run.plana031.stdout: 2019-07-22 05:41:52,178.178 INFO:teuthology.orchestra.run.plana031.stdout:CENTOS_MANTISBT_PROJECT="CentOS-7" 2019-07-22 05:41:52,179.179 INFO:teuthology.orchestra.run.plana031.stdout:CENTOS_MANTISBT_PROJECT_VERSION="7" 2019-07-22 05:41:52,179.179 INFO:teuthology.orchestra.run.plana031.stdout:REDHAT_SUPPORT_PRODUCT="centos" 2019-07-22 05:41:52,179.179 INFO:teuthology.orchestra.run.plana031.stdout:REDHAT_SUPPORT_PRODUCT_VERSION="7" 2019-07-22 05:41:52,179.179 INFO:teuthology.orchestra.run.plana031.stdout: 2019-07-22 05:41:52,183.183 INFO:teuthology.lock.ops:Updating plana031.easystack.cn on lock server 2019-07-22 05:41:52,206.206 INFO:teuthology.lock.ops:Creating new node plana031.easystack.cn on lock server 2019-07-22 05:41:52,292.292 INFO:create_nodes.py:Creating plana032.easystack.cn 2019-07-22 05:41:52,293.293 INFO:teuthology.orchestra.remote:Trying to reconnect to host 2019-07-22 05:41:52,429.429 INFO:teuthology.orchestra.run.plana032:Running: 2019-07-22 05:41:52,429.429 INFO:teuthology.orchestra.run.plana032:> true 2019-07-22 05:41:52,519.519 INFO:teuthology.orchestra.run.plana032:Running: 2019-07-22 05:41:52,519.519 INFO:teuthology.orchestra.run.plana032:> uname -m 2019-07-22 05:41:52,609.609 INFO:teuthology.orchestra.run.plana032.stdout:x86_64 2019-07-22 05:41:52,610.610 INFO:teuthology.orchestra.run.plana032:Running: 2019-07-22 05:41:52,610.610 INFO:teuthology.orchestra.run.plana032:> cat /etc/os-release 2019-07-22 05:41:52,699.699 INFO:teuthology.orchestra.run.plana032.stdout:NAME="CentOS Linux" 2019-07-22 05:41:52,700.700 INFO:teuthology.orchestra.run.plana032.stdout:VERSION="7 (Core)" 2019-07-22 05:41:52,700.700 INFO:teuthology.orchestra.run.plana032.stdout:ID="centos" 2019-07-22 05:41:52,700.700 INFO:teuthology.orchestra.run.plana032.stdout:ID_LIKE="rhel fedora" 2019-07-22 05:41:52,701.701 INFO:teuthology.orchestra.run.plana032.stdout:VERSION_ID="7" 2019-07-22 05:41:52,701.701 INFO:teuthology.orchestra.run.plana032.stdout:PRETTY_NAME="CentOS Linux 7 (Core)" 2019-07-22 05:41:52,701.701 INFO:teuthology.orchestra.run.plana032.stdout:ANSI_COLOR="0;31" 2019-07-22 05:41:52,702.702 INFO:teuthology.orchestra.run.plana032.stdout:CPE_NAME="cpe:/o:centos:centos:7" 2019-07-22 05:41:52,702.702 INFO:teuthology.orchestra.run.plana032.stdout:HOME_URL="https://www.centos.org/" 2019-07-22 05:41:52,702.702 INFO:teuthology.orchestra.run.plana032.stdout:BUG_REPORT_URL="https://bugs.centos.org/" 2019-07-22 05:41:52,703.703 INFO:teuthology.orchestra.run.plana032.stdout: 2019-07-22 05:41:52,703.703 INFO:teuthology.orchestra.run.plana032.stdout:CENTOS_MANTISBT_PROJECT="CentOS-7" 2019-07-22 05:41:52,703.703 INFO:teuthology.orchestra.run.plana032.stdout:CENTOS_MANTISBT_PROJECT_VERSION="7" 2019-07-22 05:41:52,703.703 INFO:teuthology.orchestra.run.plana032.stdout:REDHAT_SUPPORT_PRODUCT="centos" 2019-07-22 05:41:52,704.704 INFO:teuthology.orchestra.run.plana032.stdout:REDHAT_SUPPORT_PRODUCT_VERSION="7" 2019-07-22 05:41:52,704.704 INFO:teuthology.orchestra.run.plana032.stdout: 2019-07-22 05:41:52,706.706 INFO:teuthology.lock.ops:Updating plana032.easystack.cn on lock server 2019-07-22 05:41:52,726.726 INFO:teuthology.lock.ops:Creating new node plana032.easystack.cn on lock server 2019-07-22 05:41:52,758.758 INFO:create_nodes.py:Creating plana033.easystack.cn 2019-07-22 05:41:52,758.758 INFO:teuthology.orchestra.remote:Trying to reconnect to host 2019-07-22 05:41:52,928.928 INFO:teuthology.orchestra.run.plana033:Running: 2019-07-22 05:41:52,929.929 INFO:teuthology.orchestra.run.plana033:> true 2019-07-22 05:41:53,015.015 INFO:teuthology.orchestra.run.plana033:Running: 2019-07-22 05:41:53,015.015 INFO:teuthology.orchestra.run.plana033:> uname -m 2019-07-22 05:41:53,108.108 INFO:teuthology.orchestra.run.plana033.stdout:x86_64 2019-07-22 05:41:53,109.109 INFO:teuthology.orchestra.run.plana033:Running: 2019-07-22 05:41:53,109.109 INFO:teuthology.orchestra.run.plana033:> cat /etc/os-release 2019-07-22 05:41:53,201.201 INFO:teuthology.orchestra.run.plana033.stdout:NAME="CentOS Linux" 2019-07-22 05:41:53,202.202 INFO:teuthology.orchestra.run.plana033.stdout:VERSION="7 (Core)" 2019-07-22 05:41:53,202.202 INFO:teuthology.orchestra.run.plana033.stdout:ID="centos" 2019-07-22 05:41:53,202.202 INFO:teuthology.orchestra.run.plana033.stdout:ID_LIKE="rhel fedora" 2019-07-22 05:41:53,202.202 INFO:teuthology.orchestra.run.plana033.stdout:VERSION_ID="7" 2019-07-22 05:41:53,203.203 INFO:teuthology.orchestra.run.plana033.stdout:PRETTY_NAME="CentOS Linux 7 (Core)" 2019-07-22 05:41:53,203.203 INFO:teuthology.orchestra.run.plana033.stdout:ANSI_COLOR="0;31" 2019-07-22 05:41:53,203.203 INFO:teuthology.orchestra.run.plana033.stdout:CPE_NAME="cpe:/o:centos:centos:7" 2019-07-22 05:41:53,203.203 INFO:teuthology.orchestra.run.plana033.stdout:HOME_URL="https://www.centos.org/" 2019-07-22 05:41:53,203.203 INFO:teuthology.orchestra.run.plana033.stdout:BUG_REPORT_URL="https://bugs.centos.org/" 2019-07-22 05:41:53,204.204 INFO:teuthology.orchestra.run.plana033.stdout: 2019-07-22 05:41:53,204.204 INFO:teuthology.orchestra.run.plana033.stdout:CENTOS_MANTISBT_PROJECT="CentOS-7" 2019-07-22 05:41:53,204.204 INFO:teuthology.orchestra.run.plana033.stdout:CENTOS_MANTISBT_PROJECT_VERSION="7" 2019-07-22 05:41:53,204.204 INFO:teuthology.orchestra.run.plana033.stdout:REDHAT_SUPPORT_PRODUCT="centos" 2019-07-22 05:41:53,205.205 INFO:teuthology.orchestra.run.plana033.stdout:REDHAT_SUPPORT_PRODUCT_VERSION="7" 2019-07-22 05:41:53,205.205 INFO:teuthology.orchestra.run.plana033.stdout: 2019-07-22 05:41:53,208.208 INFO:teuthology.lock.ops:Updating plana033.easystack.cn on lock server 2019-07-22 05:41:53,226.226 INFO:teuthology.lock.ops:Creating new node plana033.easystack.cn on lock server 

#2 Updated by yite gu over 4 years ago

you can try to upgrade paramiko version to 2.5.0,it will resolve problem about /home/sseshasa/teuthology/virtualenv/local/lib/python2.7/site-packages/paramiko/ecdsakey.py:164: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point

#3 Updated by Sridhar Seshasayee over 4 years ago

  • Status changed from New to Closed

I am not seeing this issue anymore. The version of SSH on my workstation used to generate my private SSH key was not compatible with the SSH version running on the teuthology front machine. After generating a new private SSH key on the teuthology front machine and testing the locking command, the issue is no longer seen. I am therefore closing this issue.

Also available in: Atom PDF