bolt icon indicating copy to clipboard operation
bolt copied to clipboard

Bump to net-ssh 7.x

Open beechtom opened this issue 2 years ago • 10 comments

Use Case

net-ssh recently started releasing the 7.x series. We should bump this gem to keep up-to-date with any security fixes and new features that are released in the future.

Notes

  • Requires Ruby >= 2.6. This prevents us from bumping until all other packages that use Bolt no longer support Ruby 2.5.
  • Removes support for several algorithms that are no longer considered secure. This affects Bolt's ssh.*-algorithms config and introduces breaking changes.
  • We need to investigate what other breaking changes were made so we can update Bolt accordingly.

beechtom avatar Jun 28 '22 21:06 beechtom

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

github-actions[bot] avatar Aug 28 '22 00:08 github-actions[bot]

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

This is still a valid issue.

silug avatar Aug 30 '22 17:08 silug

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

github-actions[bot] avatar Oct 30 '22 00:10 github-actions[bot]

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

Bolt 3.26.1 still includes net-ssh 6.1.0.

silug avatar Nov 05 '22 18:11 silug

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

github-actions[bot] avatar Jan 06 '23 00:01 github-actions[bot]

I think this github bot is really not helpful.

bastelfreak avatar Jan 06 '23 08:01 bastelfreak

at least an update to net-ssh 6.2 should be done which supports rsa-sha2-512 and rsa-sha2-256 host_key algorithms which are required to connect to newer distributions in default configuration (debian bookworm+)

the currently latest puppet-bolt debian package 3.27.2-1 still comes with 6.1

juliantaylor avatar Sep 06 '23 10:09 juliantaylor

Hey, has there been any progress on this?

benjamin-robertson avatar Apr 24 '24 05:04 benjamin-robertson

This is likely something that will be included in bolt 4.

donoghuc avatar May 06 '24 22:05 donoghuc