caution verify hangs silently at "Reproducing enclave image" when codeberg.org is not in known_hosts #343

mkaihara commented 2026年06月29日 20:03:05 +02:00

Summary

When running caution verify for the first time on a machine that has never connected to codeberg.org, the command hangs indefinitely at the "Reproducing enclave image" spinner without any error or prompt. The root
cause is that caution verify tries to clone the app source via SSH (ssh://git@codeberg.org/...) but the SSH host key verification prompt for codeberg.org is never surfaced to the user.

Steps to reproduce

1. Set up a fresh machine (or remove codeberg.org from ~/.ssh/known_hosts)
2. Deploy an app: git push caution main
3. Run caution verify
4. Observe the command spinning indefinitely at "Reproducing enclave image" with no further output

Expected behaviour

Either:

• Surface the SSH host key prompt to the user so they can accept it, or
• Detect the failure and print a clear error: "codeberg.org is not in known_hosts — run ssh-keyscan codeberg.org >> ~/.ssh/known_hosts first"

Actual behaviour

The spinner hangs forever at "Reproducing enclave image" with no error message (see screenshot).

Workaround

Manually accept the host key before running caution verify:
ssh -T git@codeberg.org # accept the prompt
caution verify

Environment

• macOS Darwin 25.5.0, Apple Silicon
• caution 0.1.0
• Self-hosted backend

Summary When running caution verify for the first time on a machine that has never connected to codeberg.org, the command hangs indefinitely at the "Reproducing enclave image" spinner without any error or prompt. The root cause is that caution verify tries to clone the app source via SSH (ssh://git@codeberg.org/...) but the SSH host key verification prompt for codeberg.org is never surfaced to the user. Steps to reproduce 1. Set up a fresh machine (or remove codeberg.org from ~/.ssh/known_hosts) 2. Deploy an app: git push caution main 3. Run caution verify 4. Observe the command spinning indefinitely at "Reproducing enclave image" with no further output Expected behaviour Either: - Surface the SSH host key prompt to the user so they can accept it, or - Detect the failure and print a clear error: "codeberg.org is not in known_hosts — run ssh-keyscan codeberg.org >> ~/.ssh/known_hosts first" Actual behaviour The spinner hangs forever at "Reproducing enclave image" with no error message (see screenshot). Workaround Manually accept the host key before running caution verify: ssh -T git@codeberg.org # accept the prompt caution verify Environment - macOS Darwin 25.5.0, Apple Silicon - caution 0.1.0 - Self-hosted backend

vkobel commented 2026年06月30日 15:10:04 +02:00

Thanks for this!

Should be fixed by #341

Thanks for this! Should be fixed by #341