It may also want the old key removed for the IP, done in the same way:
ssh-keygen -f "/home/yourusername/.ssh/known_hosts" -R 208.80.154.149
On 13 April 2016 at 19:04, Daniel Zahn <dzahn(a)wikimedia.org> wrote:
bast1001 is back, now on Debian jessie, and you can
use it again.
All users have been created by puppet and i rsynced /home dirs back from a
temp.
backup location, so all your old files are back.
If you get an error "Host key verification failed.", remove the old
key with something like:
ssh-keygen -f "/home/yourusername/.ssh/known_hosts" -R
bast1001.wikimedia.org
and accept the new keys, which have these fingerprints:
https://phabricator.wikimedia.org/T123721#2204201
+---------+---------+-------------------------------------------------+
| Cipher | Algo | Fingerprint |
+---------+---------+-------------------------------------------------+
| RSA | MD5 | 74:9a:74:e2:3b:ec:5d:fd:d4:45:8c:84:11:c8:9a:4e |
| RSA | SHA-256 | rLmcE2r1JRrHrsOZIGZ3YHNJUzf4IOyTEg9wuCpDJjM= |
+---------+---------+-------------------------------------------------+
| DSA | MD5 | 45:f4:34:3a:c1:34:66:ef:a8:45:ad:ff:30:c4:d7:b2 |
| DSA | SHA-256 | GlqVy4JESiO/j7ELqXyhIbl5oZGmWO8tgroavpPOX/s= |
+---------+---------+-------------------------------------------------+
| ECDSA | MD5 | 9f:2b:ab:10:de:52:13:87:34:4c:20:52:be:0f:91:c3 |
| ECDSA | SHA-256 | uJjbBNi8661vAbuk6i9N5lc65AxT31nLEAO87/vJgcE= |
+---------+---------+-------------------------------------------------+
| ED25519 | MD5 | 8d:e2:1f:1b:4f:76:89:91:c1:99:dd:d5:a9:d9:0d:47 |
| ED25519 | SHA-256 | cyZDMw0Oon1OJrNWD0xY+CETCaAZlyIBazYL1vtb1TE= |
+---------+---------+-------------------------------------------------+
On Tue, Apr 12, 2016 at 5:41 PM, Daniel Zahn <dzahn(a)wikimedia.org> wrote:
Hi,
tomorrow at 1800 UTC (10am PST) i would like to upgrade bast1001 and
schedule some downtime. I anticipate about an hour.
Data from home dirs has already been rsynced elsewhere (and is in
Bacula).
Please switch to bast3001 or bast2001 during this period (or permanently
if they
are closer for you anyways).
--
Daniel Zahn <dzahn(a)wikimedia.org>
Operations Engineer
--
Daniel Zahn <dzahn(a)wikimedia.org>
Operations Engineer
_______________________________________________
Wikitech-l mailing list
Wikitech-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l