# SSH Setup Troubleshooting

**Last Updated**: 2024-12-19

## Current Issue

SSH key copy is failing with "Permission denied" even though:
- ✅ `PROXMOX_ROOT_PASS` is in `.env`
- ✅ `sshpass` is installed
- ✅ SSH key exists: `~/.ssh/sankofa_proxmox`

## Possible Causes

### 1. Password Authentication Disabled

Proxmox may have password authentication disabled for security. Check:

```bash
# On Proxmox node (via Web UI Shell or console)
grep -i "PasswordAuthentication" /etc/ssh/sshd_config
```

If `PasswordAuthentication no`, enable it temporarily:
```bash
# On Proxmox node
sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config
sed -i 's/PasswordAuthentication no/PasswordAuthentication yes/' /etc/ssh/sshd_config
systemctl restart sshd
```

### 2. Incorrect Password

Verify the password in `.env` matches the actual root password on Proxmox nodes.

### 3. SSH Key Already Exists

The key may already be on the server. Check:
```bash
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.10 'cat ~/.ssh/authorized_keys | grep sankofa'
```

### 4. Root Login Disabled

Check if root login is allowed:
```bash
# On Proxmox node
grep -i "PermitRootLogin" /etc/ssh/sshd_config
```

## Alternative Methods

### Method 1: Use Proxmox Web UI Shell

1. Log in to https://ml110-01.sankofa.nexus:8006
2. Go to: **Datacenter** → **Nodes** → **ML110-01** → **Shell**
3. Run:
   ```bash
   mkdir -p ~/.ssh
   chmod 700 ~/.ssh
   echo "YOUR_PUBLIC_KEY_HERE" >> ~/.ssh/authorized_keys
   chmod 600 ~/.ssh/authorized_keys
   ```

### Method 2: Manual SSH Copy (Interactive)

```bash
# This will prompt for password
ssh-copy-id -i ~/.ssh/sankofa_proxmox.pub root@192.168.11.10
ssh-copy-id -i ~/.ssh/sankofa_proxmox.pub root@192.168.11.11
```

### Method 3: Use Existing SSH Access

If you already have SSH access via another method:
```bash
# Copy key using existing access
cat ~/.ssh/sankofa_proxmox.pub | ssh root@192.168.11.10 'cat >> ~/.ssh/authorized_keys'
cat ~/.ssh/sankofa_proxmox.pub | ssh root@192.168.11.11 'cat >> ~/.ssh/authorized_keys'
```

## Verification

After adding keys, test:
```bash
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.10 'hostname'
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.11 'hostname'
```

## Related Documentation

- [SSH Setup with .env](./SSH_SETUP_WITH_ENV.md)
- [Remaining Blockers Guide](./REMAINING_BLOCKERS_GUIDE.md)