Hello Prosmoxsters,
I am running a cluster of three devices on version 8.0.3
( Previously this was a cluster of 2 and a Q device. I have removed the Q device and added in another Promox installed device )
Example: If I am on device 1, I can get VNC to the VMs fine of that device, but if I try to VNC to another VM on another device, I get "No Proxy". This seems to be a well documented issue and I have have tried the below found with other posts that are the same issue:
EDIT: It seems that of I connect to either 1 or 3, I can get to the VMs on 1. 3, just 2 seems to be the one with the key issue, and this is the one that I added to replace the Q Device. { End EDIT }
1) SSH in from outside of the cluster (e.g. your workstation) only.
2) Ran everywhere separately:
rm -rf ~/.ssh/known_hostsrm -rf /etc/ssh/ssh_known_hosts
3) Then once ran (from any node):
rm -rf /etc/pve/priv/known_hosts
4) Then again everywhese separately:
pvecm updatecerts
The order and not using SSH across node or GUI to connect is important.
Because if you ran all of the above, there's literally no keys left but the (most recent only) nodes' ones. So if you were still getting the same key error that would be odd. Can you post your exact error shown? Even if it looks similar or same like the other poster's, can you post your full error?
After running these commands as described above, I was able to confirm that the folders were no longer there then populated with ssh keys; however I still have the issues. When I check the logs this is what I am seeing:
Host key verification failed.
TASK ERROR: Failed to run vncproxy.
-- or --
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:XGMQbBZsbJU++9VjDlP0hjOsfbcKIh+UkxU+Qflb1HQ.
Please contact your system administrator.
Add correct host key in /etc/pve/nodes/proxmox1/ssh_known_hosts to get rid of this message.
Offending RSA key in /etc/pve/nodes/proxmox1/ssh_known_hosts:1
remove with:
ssh-keygen -f "/etc/pve/nodes/proxmox1/ssh_known_hosts" -R "proxmox1"
Host key for proxmox1 has changed and you have requested strict checking.
Host key verification failed.
TASK ERROR: Failed to run vncproxy.
If I try to run the suggested commands:
remove with:
ssh-keygen -f "/etc/pve/nodes/proxmox1/ssh_known_hosts" -R "proxmox1"
This too errors. Do I need to manually remove these? Is there is a different process that I need to be running to correct my ssh keys issue?
Thoughts, suggestions?
Thank you for your input
I am running a cluster of three devices on version 8.0.3
( Previously this was a cluster of 2 and a Q device. I have removed the Q device and added in another Promox installed device )
Example:
EDIT: It seems that of I connect to either 1 or 3, I can get to the VMs on 1. 3, just 2 seems to be the one with the key issue, and this is the one that I added to replace the Q Device. { End EDIT }
1) SSH in from outside of the cluster (e.g. your workstation) only.
2) Ran everywhere separately:
rm -rf ~/.ssh/known_hostsrm -rf /etc/ssh/ssh_known_hosts
3) Then once ran (from any node):
rm -rf /etc/pve/priv/known_hosts
4) Then again everywhese separately:
pvecm updatecerts
The order and not using SSH across node or GUI to connect is important.
Because if you ran all of the above, there's literally no keys left but the (most recent only) nodes' ones. So if you were still getting the same key error that would be odd. Can you post your exact error shown? Even if it looks similar or same like the other poster's, can you post your full error?
After running these commands as described above, I was able to confirm that the folders were no longer there then populated with ssh keys; however I still have the issues. When I check the logs this is what I am seeing:
Host key verification failed.
TASK ERROR: Failed to run vncproxy.
-- or --
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:XGMQbBZsbJU++9VjDlP0hjOsfbcKIh+UkxU+Qflb1HQ.
Please contact your system administrator.
Add correct host key in /etc/pve/nodes/proxmox1/ssh_known_hosts to get rid of this message.
Offending RSA key in /etc/pve/nodes/proxmox1/ssh_known_hosts:1
remove with:
ssh-keygen -f "/etc/pve/nodes/proxmox1/ssh_known_hosts" -R "proxmox1"
Host key for proxmox1 has changed and you have requested strict checking.
Host key verification failed.
TASK ERROR: Failed to run vncproxy.
If I try to run the suggested commands:
remove with:
ssh-keygen -f "/etc/pve/nodes/proxmox1/ssh_known_hosts" -R "proxmox1"
This too errors. Do I need to manually remove these? Is there is a different process that I need to be running to correct my ssh keys issue?
Thoughts, suggestions?
Thank you for your input
Last edited: