I will be replacing the current Cloud VPS and Toolforge bastions with new hosts running Debian 13. As usual, new bastions have new SSH keys, so your SSH client will warn you about the change once it happens. The new keys will be published to the usual places:
[primary.]bastion.wmcloud.org: https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/primary.bastion.wmcloud.org secondary.bastion.wmcloud.org: https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/secondary.bastion.wmcloud.org login.toolforge.org: https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/login.toolforge.org dev.toolforge.org: https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/dev.toolforge.org There's a few noteworthy changes this round: * The new bastions are in the IPv6-enabled network and have AAAA records. * The OpenSSH version in Debian 13 drops support for some obsolete key types. Most notably ssh-dss user keys are no longer supported. I found no recent uses of those keys, but if I have missed some, you will need to create a more modern key to log in again. Please report any issues with the new bastions to the related Phabricator tasks: * https://phabricator.wikimedia.org/T392689 (for Cloud VPS) * https://phabricator.wikimedia.org/T392510 (for Toolforge) Taavi -- Taavi Väänänen (he/him) Site Reliability Engineer, Cloud Services Wikimedia Foundation _______________________________________________ Cloud-announce mailing list -- [email protected] List information: https://lists.wikimedia.org/postorius/lists/cloud-announce.lists.wikimedia.org/ _______________________________________________ Cloud mailing list -- [email protected] List information: https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
