It may also want the old key removed for the IP, done in the same way: ssh-keygen -f "/home/yourusername/.ssh/known_hosts" -R 208.80.154.149
On 13 April 2016 at 19:04, Daniel Zahn dzahn@wikimedia.org wrote:
bast1001 is back, now on Debian jessie, and you can use it again.
All users have been created by puppet and i rsynced /home dirs back from a temp. backup location, so all your old files are back.
If you get an error "Host key verification failed.", remove the old key with something like:
ssh-keygen -f "/home/yourusername/.ssh/known_hosts" -R bast1001.wikimedia.org
and accept the new keys, which have these fingerprints:
https://phabricator.wikimedia.org/T123721#2204201
+---------+---------+-------------------------------------------------+ | Cipher | Algo | Fingerprint | +---------+---------+-------------------------------------------------+ | RSA | MD5 | 74:9a:74:e2:3b:ec:5d:fd:d4:45:8c:84:11:c8:9a:4e | | RSA | SHA-256 | rLmcE2r1JRrHrsOZIGZ3YHNJUzf4IOyTEg9wuCpDJjM= | +---------+---------+-------------------------------------------------+ | DSA | MD5 | 45:f4:34:3a:c1:34:66:ef:a8:45:ad:ff:30:c4:d7:b2 | | DSA | SHA-256 | GlqVy4JESiO/j7ELqXyhIbl5oZGmWO8tgroavpPOX/s= | +---------+---------+-------------------------------------------------+ | ECDSA | MD5 | 9f:2b:ab:10:de:52:13:87:34:4c:20:52:be:0f:91:c3 | | ECDSA | SHA-256 | uJjbBNi8661vAbuk6i9N5lc65AxT31nLEAO87/vJgcE= | +---------+---------+-------------------------------------------------+ | ED25519 | MD5 | 8d:e2:1f:1b:4f:76:89:91:c1:99:dd:d5:a9:d9:0d:47 | | ED25519 | SHA-256 | cyZDMw0Oon1OJrNWD0xY+CETCaAZlyIBazYL1vtb1TE= | +---------+---------+-------------------------------------------------+
On Tue, Apr 12, 2016 at 5:41 PM, Daniel Zahn dzahn@wikimedia.org wrote:
Hi,
tomorrow at 1800 UTC (10am PST) i would like to upgrade bast1001 and schedule some downtime. I anticipate about an hour.
Data from home dirs has already been rsynced elsewhere (and is in
Bacula).
Please switch to bast3001 or bast2001 during this period (or permanently
if they are closer for you anyways).
-- Daniel Zahn dzahn@wikimedia.org Operations Engineer
-- Daniel Zahn dzahn@wikimedia.org Operations Engineer
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l