[REDFISH-1] Not copying ssh key files to RC from Build server

Thu, 11 Apr 2019 19:23:35 +0000

Hello,

We are trying to setup RC from Build server. we ran install_server_os.sh file as per the instructions provided under Akraino wiki. While running this script, everything is going smoothly but when copying the ssh key files from build server to RC node those are not copying properly and we got an error. Please see the below error:

Getting new host keys for [10.51.34.230]

10.51.34.230:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7
copying user key to [root@10.51.34.230]
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/ubuntu/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: ERROR: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
ERROR: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
ERROR: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
ERROR: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
ERROR: Someone could be eavesdropping on you right now (man-in-the-middle attack)!
ERROR: It is also possible that a host key has just been changed.
ERROR: The fingerprint for the ECDSA key sent by the remote host is
ERROR: SHA256:AT19rCR6FK/a+5lQcXpb0UCIphRchjcFS3mCad1f6Ng.
ERROR: Please contact your system administrator.
ERROR: Add correct host key in /root/.ssh/known_hosts to get rid of this message.
ERROR: Offending ECDSA key in /root/.ssh/known_hosts:1
ERROR: remove with:
ERROR: ssh-keygen -f "/root/.ssh/known_hosts" -R 10.51.34.230
ERROR: ECDSA host key for 10.51.34.230 has changed and you have requested strict checking.
ERROR: Host key verification failed.

Running first boot script
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:AT19rCR6FK/a+5lQcXpb0UCIphRchjcFS3mCad1f6Ng.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /root/.ssh/known_hosts:1
remove with:
ssh-keygen -f "/root/.ssh/known_hosts" -R 10.51.34.230
ECDSA host key for 10.51.34.230 has changed and you have requested strict checking.
Host key verification failed.
FAILED: Unable to run firstboot script on new server

By understanding install_server_os.sh script that, it suppose to copy ssh key files automatically from build server to RC node, but here in this case it is not. Ran this script from scratch multiple times and same issue came up again. Please see the attached logs for quick reference. Please take a look at the error and let me know.

Akraino JIRA

[REDFISH-1] Not copying ssh key files to RC from Build server