• Bug#1106751: validate --sshkey= parameter

    From Lee Garrett@21:1/5 to All on Thu May 29 11:20:01 2025
    Package: mmdebstrap
    Version: 1.5.7-1
    Severity: wishlist
    X-Debbugs-Cc: debian@rocketjump.eu

    Hi,

    would be nice if mmdebstrap-autopkgtest-build-qemu would validate that the file passed via --sshkey= is a pubkey, and maybe even checking if the key type is supported by the release being built.

    In my case I accidentally tabcompleted to the private key, and that got added to
    /root/.ssh/authorized_keys, which of course won't let me log in.

    Greets,
    Lee


    -- System Information:
    Debian Release: 13.0
    APT prefers testing
    APT policy: (990, 'testing'), (500, 'unstable')
    Architecture: amd64 (x86_64)

    Kernel: Linux 6.12.27-amd64 (SMP w/8 CPU threads; PREEMPT)
    Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
    Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
    Shell: /bin/sh linked to /usr/bin/dash
    Init: systemd (via /run/systemd/system)
    LSM: AppArmor: enabled

    Versions of packages mmdebstrap depends on:
    ii apt 3.0.1
    ii perl 5.40.1-3
    ii python3 3.13.3-1

    Versions of packages mmdebstrap recommends:
    ii arch-test 0.22-1
    ii gpg 2.4.7-17
    ii libdistro-info-perl 1.13
    ii libdpkg-perl 1.22.18
    ii mount 2.41-5
    ii uidmap 1:4.17.4-2

    Versions of packages mmdebstrap suggests:
    pn apt-transport-tor <none>
    ii apt-utils 3.0.1
    ii bzip2 1.0.8-6
    ii ca-certificates 20250419
    ii debootstrap 1.0.142
    ii distro-info-data 0.64
    ii dpkg-dev 1.22.18
    ii e2fsprogs 1.47.2-1+b1
    ii fakechroot 2.20.1+ds-18
    ii fakeroot 1.37.1.1-1
    ii genext2fs 1.5.0-3+b1
    ii libarchive13t64 [libarchive13] 3.7.4-3
    ii lz4 1.10.0-4
    ii lzop 1.04-2
    pn ncompress <none>
    ii perl-doc 5.40.1-3
    ii qemu-user 1:10.0.0+ds-2
    ii qemu-user-static 1:10.0.0+ds-2
    pn squashfs-tools-ng <none>
    ii systemd 257.5-2
    ii xz-utils 5.8.1-1
    ii zstd 1.5.7+dfsg-1

    -- no debconf information

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)