9daf1fd378
- Add comprehensive database migrations (001-024) for schema evolution - Enhance API schema with expanded type definitions and resolvers - Add new middleware: audit logging, rate limiting, MFA enforcement, security, tenant auth - Implement new services: AI optimization, billing, blockchain, compliance, marketplace - Add adapter layer for cloud integrations (Cloudflare, Kubernetes, Proxmox, storage) - Update Crossplane provider with enhanced VM management capabilities - Add comprehensive test suite for API endpoints and services - Update frontend components with improved GraphQL subscriptions and real-time updates - Enhance security configurations and headers (CSP, CORS, etc.) - Update documentation and configuration files - Add new CI/CD workflows and validation scripts - Implement design system improvements and UI enhancements
94 lines
2.3 KiB
Markdown
94 lines
2.3 KiB
Markdown
# SSH Setup Troubleshooting
|
|
|
|
**Last Updated**: 2024-12-19
|
|
|
|
## Current Issue
|
|
|
|
SSH key copy is failing with "Permission denied" even though:
|
|
- ✅ `PROXMOX_ROOT_PASS` is in `.env`
|
|
- ✅ `sshpass` is installed
|
|
- ✅ SSH key exists: `~/.ssh/sankofa_proxmox`
|
|
|
|
## Possible Causes
|
|
|
|
### 1. Password Authentication Disabled
|
|
|
|
Proxmox may have password authentication disabled for security. Check:
|
|
|
|
```bash
|
|
# On Proxmox node (via Web UI Shell or console)
|
|
grep -i "PasswordAuthentication" /etc/ssh/sshd_config
|
|
```
|
|
|
|
If `PasswordAuthentication no`, enable it temporarily:
|
|
```bash
|
|
# On Proxmox node
|
|
sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config
|
|
sed -i 's/PasswordAuthentication no/PasswordAuthentication yes/' /etc/ssh/sshd_config
|
|
systemctl restart sshd
|
|
```
|
|
|
|
### 2. Incorrect Password
|
|
|
|
Verify the password in `.env` matches the actual root password on Proxmox nodes.
|
|
|
|
### 3. SSH Key Already Exists
|
|
|
|
The key may already be on the server. Check:
|
|
```bash
|
|
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.10 'cat ~/.ssh/authorized_keys | grep sankofa'
|
|
```
|
|
|
|
### 4. Root Login Disabled
|
|
|
|
Check if root login is allowed:
|
|
```bash
|
|
# On Proxmox node
|
|
grep -i "PermitRootLogin" /etc/ssh/sshd_config
|
|
```
|
|
|
|
## Alternative Methods
|
|
|
|
### Method 1: Use Proxmox Web UI Shell
|
|
|
|
1. Log in to https://ml110-01.sankofa.nexus:8006
|
|
2. Go to: **Datacenter** → **Nodes** → **ML110-01** → **Shell**
|
|
3. Run:
|
|
```bash
|
|
mkdir -p ~/.ssh
|
|
chmod 700 ~/.ssh
|
|
echo "YOUR_PUBLIC_KEY_HERE" >> ~/.ssh/authorized_keys
|
|
chmod 600 ~/.ssh/authorized_keys
|
|
```
|
|
|
|
### Method 2: Manual SSH Copy (Interactive)
|
|
|
|
```bash
|
|
# This will prompt for password
|
|
ssh-copy-id -i ~/.ssh/sankofa_proxmox.pub root@192.168.11.10
|
|
ssh-copy-id -i ~/.ssh/sankofa_proxmox.pub root@192.168.11.11
|
|
```
|
|
|
|
### Method 3: Use Existing SSH Access
|
|
|
|
If you already have SSH access via another method:
|
|
```bash
|
|
# Copy key using existing access
|
|
cat ~/.ssh/sankofa_proxmox.pub | ssh root@192.168.11.10 'cat >> ~/.ssh/authorized_keys'
|
|
cat ~/.ssh/sankofa_proxmox.pub | ssh root@192.168.11.11 'cat >> ~/.ssh/authorized_keys'
|
|
```
|
|
|
|
## Verification
|
|
|
|
After adding keys, test:
|
|
```bash
|
|
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.10 'hostname'
|
|
ssh -i ~/.ssh/sankofa_proxmox root@192.168.11.11 'hostname'
|
|
```
|
|
|
|
## Related Documentation
|
|
|
|
- [SSH Setup with .env](./SSH_SETUP_WITH_ENV.md)
|
|
- [Remaining Blockers Guide](./REMAINING_BLOCKERS_GUIDE.md)
|
|
|