all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Christopher Baines <mail@cbaines.net>
To: 55335@debbugs.gnu.org
Subject: bug#55335: openssh-service no longer listens on IPv6
Date: Mon, 09 May 2022 11:39:47 +0100	[thread overview]
Message-ID: <87r153q913.fsf@cbaines.net> (raw)

[-- Attachment #1: Type: text/plain, Size: 1345 bytes --]

This looks to be a recent regression, probably connected with the
shepherd now doing the listening, rather than sshd itself.

Previously, you could use both IPv4 and IPv6.

  netstat -tlnp | grep sshd
  tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      26683/sshd: /gnu/st
  tcp6       0      0 :::22                   :::*                    LISTEN      26683/sshd: /gnu/st

Now though, it looks like with shepherd doing the listening, you can
only use IPv4.

  netstat -tlnp | grep 22
  tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1/guile


On an affected machine, you can reproduce this by trying to SSH over v6.

  cbaines@lakeside ~$ ssh 127.0.0.1
  The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
  ED25519 key fingerprint is SHA256:1wV7w84awrGv5ilP5e8k5ygIvSkXSJ6LIy3MnqZG2Jw.
  This key is not known by any other names
  Are you sure you want to continue connecting (yes/no/[fingerprint])? ^C

  cbaines@lakeside ~$ ssh ::1
  ssh: connect to host ::1 port 22: Connection refused


This isn't an issue if you're not using IPv6, but if you have a machine
only accessible via IPv6, then you can't ssh in. The main workaround
I've found is getting access via other means, then starting sshd
listening on a different port (as the shepherd is using 22).

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 987 bytes --]

             reply	other threads:[~2022-05-09 11:16 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-05-09 10:39 Christopher Baines [this message]
2022-05-13 12:21 ` bug#55335: openssh-service no longer listens on IPv6 Christopher Baines
2022-05-13 14:23 ` bug#55335: [PATCH] services: Allow shepherd to listen for IPv6 connections to openssh Christopher Baines
2022-05-13 15:23   ` Jack Hill
2022-05-13 15:25     ` Jack Hill
2022-05-14  8:42     ` bug#55335: openssh-service no longer listens on IPv6 Ludovic Courtès
2022-05-14 14:16   ` Ludovic Courtès
2022-05-18 14:06     ` bug#55335: [PATCH Shepherd 0/3] Endpoints for inetd services + IPv6-only endpoints Ludovic Courtès
2022-05-18 14:06       ` bug#55335: [PATCH Shepherd 1/3] service: 'make-inetd-constructor' accepts a list of endpoints Ludovic Courtès
2022-05-18 14:06       ` bug#55335: [PATCH Shepherd 2/3] tests: Update inetd tests to pass " Ludovic Courtès
2022-05-18 14:06       ` bug#55335: [PATCH Shepherd 3/3] Interpret AF_INET6 endpoints as IPv6-only Ludovic Courtès
2022-05-18 14:28         ` bug#55335: openssh-service no longer listens on IPv6 Ludovic Courtès
2022-05-22 20:08           ` Ludovic Courtès
2022-05-22 22:35             ` Jack Hill
2022-05-23 13:30               ` Ludovic Courtès
2022-05-23 15:29             ` Simon Streit
2022-05-14 15:49   ` Ludovic Courtès
2022-05-14 19:09     ` Jack Hill
2022-05-17 21:33     ` Christopher Baines
2022-05-18  9:30       ` Ludovic Courtès

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87r153q913.fsf@cbaines.net \
    --to=mail@cbaines.net \
    --cc=55335@debbugs.gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.