Codeberg/Community
54
325
Fork
You've already forked Community
12

Codeberg fails SSH fingerprint check when under load. #2207

Closed
opened 2025年11月12日 22:27:28 +01:00 by lgarron · 3 comments

Comment

I just tried pushing and saw the following error twice:

╭─── /Users/lgarron/Code/git/github.com/lgarron/naughty-list ──────────────────────────────────────────────────────────────────────────────────────────
├─ (jj) @=z #=71 (main* +0 pushable +1 empty) 
├─ (git) main | ✔ 
├─ lgarron@Germain
│ jj git push --bookmark main --remote codeberg
┴
Changes to push to codeberg:
 Move forward bookmark main from 75f43e180066 to 852f4dea33e5
Error: Git process failed: External git program failed:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:DiXuArHFnOMWTrHyOC2yah2QuImpCyGLzuMNZEvx7yA.
Please contact your system administrator.
Add correct host key in /Users/lgarron/.ssh/known_hosts to get rid of this message.
Offending ED25519 key in /Users/lgarron/.ssh/known_hosts:360
Host key for codeberg.org has changed and you have requested strict checking.
Host key verification failed.
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
┬ 
├─ ⏱️ 1.162s 
├─ ❌ [1] command status
├─ Refreshing gg... done!
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

This fails to check against the fingerprints from: Codeberg/org@9d6f9c6d31/Imprint.md (ssh-fingerprints)

The third attempt succeeded, but I'm seeing 502 errors at https://ci.codeberg.org/repos/15569/pipeline/5/errors with messages including "We are still experiencing slow performance. Investigation is ongoing."

Presumably SHA256:DiXuArHFnOMWTrHyOC2yah2QuImpCyGLzuMNZEvx7yA is the fingerprint of a fallback server, but I'm not willing to ignore the error to find out what happens.

I'm not sure what the right approach would be, but getting a fingerprint failure is definitely concerning. I think a dropped connection would at least be less confusing.

### Comment I just tried pushing and saw the following error twice: ``` ╭─── /Users/lgarron/Code/git/github.com/lgarron/naughty-list ────────────────────────────────────────────────────────────────────────────────────────── ├─ (jj) @=z #=71 (main* +0 pushable +1 empty) ├─ (git) main | ✔ ├─ lgarron@Germain │ jj git push --bookmark main --remote codeberg ┴ Changes to push to codeberg: Move forward bookmark main from 75f43e180066 to 852f4dea33e5 Error: Git process failed: External git program failed: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that a host key has just been changed. The fingerprint for the ED25519 key sent by the remote host is SHA256:DiXuArHFnOMWTrHyOC2yah2QuImpCyGLzuMNZEvx7yA. Please contact your system administrator. Add correct host key in /Users/lgarron/.ssh/known_hosts to get rid of this message. Offending ED25519 key in /Users/lgarron/.ssh/known_hosts:360 Host key for codeberg.org has changed and you have requested strict checking. Host key verification failed. fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. ┬ ├─ ⏱️ 1.162s ├─ ❌ [1] command status ├─ Refreshing gg... done! ╰────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── ``` This fails to check against the fingerprints from: https://codeberg.org/Codeberg/org/src/commit/9d6f9c6d318b8413a561b69b78720be3cea0e10d/Imprint.md#ssh-fingerprints The third attempt succeeded, but I'm seeing 502 errors at https://ci.codeberg.org/repos/15569/pipeline/5/errors with messages including "We are still experiencing slow performance. Investigation is ongoing." Presumably `SHA256:DiXuArHFnOMWTrHyOC2yah2QuImpCyGLzuMNZEvx7yA` is the fingerprint of a fallback server, but I'm not willing to ignore the error to find out what happens. I'm not sure what the right approach would be, but getting a fingerprint failure is definitely concerning. I think a dropped connection would at least be less confusing.

This is already fixed.

This is already fixed.
Author
Copy link

This is already fixed.

It was a transient issue today. Does "fixed" imply this won't happen again?

> This is already fixed. It was a transient issue today. Does "fixed" imply this won't happen again?

It was a transient error, it's part of preparations for hardware upgrade tomorrow. https://social.anoxinon.de/@Codeberg/115538709339184130

It was a transient error, it's part of preparations for hardware upgrade tomorrow. https://social.anoxinon.de/@Codeberg/115538709339184130
Sign in to join this conversation.
No Branch/Tag specified
main
No results found.
Labels
Clear labels
accessibility

Reduces accessibility and is thus a "bug" for certain user groups on Codeberg.
bug

Something is not working the way it should. Does not concern outages.
bug
infrastructure

Errors evidently caused by infrastructure malfunctions or outages
Codeberg

This issue involves Codeberg's downstream modifications and settings and/or Codeberg's structures.
contributions welcome

Please join the discussion and consider contributing a PR!
docs

No bug, but an improvement to the docs or UI description will help
duplicate

This issue or pull request already exists
enhancement

New feature
infrastructure

Involves changes to the server setups, use `bug/infrastructure` for infrastructure-related user errors.
legal

An issue directly involving legal compliance
licence / ToS

involving questions about the ToS, especially licencing compliance
please chill
we are volunteers

Please consider editing your posts and remember that there is a human on the other side. We get that you are frustrated, but it's harder for us to help you this way.
public relations

Things related to Codeberg's external communication
question

More information is needed
question
user support

This issue contains a clearly stated problem. However, it is not clear whether we have to fix anything on Codeberg's end, but we're helping them fix it and/or find the cause.
s/Forgejo

Related to Forgejo. Please also check Forgejo's issue tracker.
s/Forgejo/migration

Migration related issues in Forgejo
s/Pages

Issues related to the Codeberg Pages feature
s/Weblate

Issue is related to the Weblate instance at https://translate.codeberg.org
s/Woodpecker

Woodpecker CI related issue
security

involves improvements to the sites security
service

Add a new service to the Codeberg ecosystem (instead of implementing into Gitea)
upstream

An open issue or pull request to an upstream repository to fix this issue (partially or completely) exists (i.e. Gitea, Forgejo, etc.)
wontfix

Codeberg's current set of contributors are not planning to spend time on delegating this issue.
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Codeberg/Community#2207
Reference in a new issue
Codeberg/Community
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?