[SOLVED] How to recreate symlink

[kafisatz]

On two of my cluster nodes, I don't have a symlink for ssh_known_hosts (see screenshot).
How can I create such a symlink?
Do I need to delete the file in

/etc/ssh

or the one in

/ec/pve/priv/

before creating the symlink?

I think

ls -l

should eventually show

ssh_known_hosts -> /etc/pve/priv/known_hosts

 

[Chris]

On two of my cluster nodes, I don't have a symlink for ssh_known_hosts (see screenshot).
How can I create such a symlink?
Do I need to delete the file in

/etc/ssh

or the one in

/ec/pve/priv/

before creating the symlink?

I think

ls -l

should eventually show

ssh_known_hosts -> /etc/pve/priv/known_hosts

View attachment 57123

Hi,
did you manually change something that got the symlink removed? To recreate the symlink, you can move the current file to a backup file mv /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts.bak and then recreate the symlink via cd /etc/ssh && ln -s /etc/pve/priv/known_hosts ssh_known_hosts.

 

[kafisatz]

This worked like a char thanks. And you were much faster than reddit (where I got no answer in 15h)
After your answer, my understanding is that the file in /etc/pve/priv is the 'true file' and the file in /etc/ssh is the 'link'.

To answer your quetsions.
I broke two of my nodes (out of 3) and had to reinstall both of them and add them back to the cluster (and recreate all of ceph).....

 

[tomstephens89]

I have just noticed this for my relativeley new cluster as well.

No symlink on 2 of my 3 nodes.

Is this a bug? How is host key auth working if there is no known hosts file?

 

[fabian]

I have just noticed this for my relativeley new cluster as well.

No symlink on 2 of my 3 nodes.

Is this a bug? How is host key auth working if there is no known hosts file?

PVE internally just pins the host key now. you are free to implement whatever scheme you want for your manual connections. each node will put its own host key into /etc/pve/nodes/$NODE/ssh_known_hosts

 

[tomstephens89]

PVE internally just pins the host key now. you are free to implement whatever scheme you want for your manual connections. each node will put its own host key into /etc/pve/nodes/$NODE/ssh_known_hosts

Ok, so if I am readding a cluster node with the same name/IP/FQDN after removal and rebuild then I just run pvecm update certs on it after adding back in?

 

[fabian]

as part of joining it should do that automatically. if you've pinned the old host key somewhere you still need to update it there, but PVE itself doesn't care

 

[tomstephens89]

as part of joining it should do that automatically. if you've pinned the old host key somewhere you still need to update it there, but PVE itself doesn't care

Ok then, shouldn't have an issue rejoining then as we havn't manually pinned any keys. To remove the dead node, we simply ran PVECM delnode XXXX and then removed the nodes folder from the cluster filesystem.