Subject: bug#73088: unable to log into childhurd vm

From: Nathan Dehnel <[email-masked]>
Date: Wed, 18 Sep 2024 23:17:40 -0500

I have also attempted to login to the console with tigervnc, and it
still won't let me log in. So it's not an SSH problem, it's a problem
with the user accounts

On Fri, Sep 6, 2024 at 10:57 PM Nathan Dehnel <[email-masked]> wrote:
>
> guix 36e30a3
>
> I am no longer able to log into the childhurd vm. My configuration
> worked previously and hasn't changed.
>             (service hurd-vm-service-type
>                      (hurd-vm-configuration
>                         (os childhurd-os)
>                         (disk-size (* 8 (expt 2 30)))))
>
> (define childhurd-os
>        ;; Definition of my GNU/Hurd system, derived from the default one.
>        (operating-system
>          (inherit %hurd-vm-operating-system)
>
>          ;; Add a user account.
>          (users (cons (user-account
>                        (name "nathan")
>                        (group "users")
>                        (password (crypt "password" "$6$abc"))
>                        (supplementary-groups '("wheel"))) ;for 'sudo'
>                       %base-user-accounts))
>
>          (services
>           (modify-services (operating-system-user-services
>                             %hurd-vm-operating-system)
>             (openssh-service-type
>              config => (openssh-configuration
>               (inherit config)
>               (permit-root-login #t)
>               (password-authentication? #t)
> ))))))
>
> $ ssh nathan@localhost -vvvvvv -p 10022
> OpenSSH_9.8p1, OpenSSL 3.0.8 7 Feb 2023
> debug1: Reading configuration data /home/nathan/.ssh/config
> debug2: resolve_addr: could not resolve name localhost as address:
> Name or service not known
> debug3: resolve_canonicalize: attempting "localhost" => "localhost.dehnel.info."
> debug3: resolve_host: lookup localhost.dehnel.info.:10022
> debug1: Canonicalized hostname "localhost" => "localhost.dehnel.info"
> debug1: hostname canonicalisation enabled, will re-parse configuration
> debug1: re-parsing configuration
> debug1: Reading configuration data /home/nathan/.ssh/config
> debug2: add_identity_file: ignoring duplicate key
> /home/nathan/.ssh/nathan-user-key
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' ->
> '/home/nathan/.ssh/known_hosts'
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' ->
> '/home/nathan/.ssh/known_hosts2'
> debug3: channel_clear_timeouts: clearing
> debug3: ssh_connect_direct: entering
> debug1: Connecting to localhost.dehnel.info [::1] port 10022.
> debug3: set_sock_tos: set socket 3 IPV6_TCLASS 0x48
> debug1: connect to address ::1 port 10022: Connection refused
> debug1: Connecting to localhost.dehnel.info [127.0.0.1] port 10022.
> debug3: set_sock_tos: set socket 3 IP_TOS 0x48
> debug1: Connection established.
> debug1: identity file /home/nathan/.ssh/nathan-user-key type 0
> debug1: identity file /home/nathan/.ssh/nathan-user-key-cert type 4
> debug1: Local version string SSH-2.0-OpenSSH_9.8
> debug1: Remote protocol version 2.0, remote software version OpenSSH_9.8
> debug1: compat_banner: match: OpenSSH_9.8 pat OpenSSH* compat 0x04000000
> debug2: fd 3 setting O_NONBLOCK
> debug1: Authenticating to localhost.dehnel.info:10022 as 'nathan'
> debug3: put_host_port: [localhost.dehnel.info]:10022
> debug3: record_hostkey: found key type ED25519 in file
> /home/nathan/.ssh/known_hosts:14
> debug3: record_hostkey: found key type RSA in file
> /home/nathan/.ssh/known_hosts:15
> debug3: record_hostkey: found key type ECDSA in file
> /home/nathan/.ssh/known_hosts:16
> debug3: load_hostkeys_file: loaded 3 keys from [localhost.dehnel.info]:10022
> debug1: load_hostkeys: fopen /home/nathan/.ssh/known_hosts2: No such
> file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file
> or directory
> debug3: order_hostkeyalgs: have matching best-preference key type
> [email-masked], using HostkeyAlgorithms verbatim
> debug3: send packet: type 20
> debug1: SSH2_MSG_KEXINIT sent
> debug3: receive packet: type 20
> debug1: SSH2_MSG_KEXINIT received
> debug2: local client KEXINIT proposal
> debug2: KEX algorithms:
> [email-masked],curve25519-sha256,[email-masked],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-
> [email-masked]
> debug2: host key algorithms:
> [email-masked],[email-masked],[email-masked],ecdsa-sha2-n
> [email-masked],[email-masked],[email-masked],[email-masked],rsa-sha2-256-
> [email-masked],ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email-masked],[email-masked],r
> sa-sha2-512,rsa-sha2-256
> debug2: ciphers ctos:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: ciphers stoc:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: MACs ctos:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,[email-masked],zlib
> debug2: compression stoc: none,[email-masked],zlib
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug2: peer server KEXINIT proposal
> debug2: KEX algorithms:
> [email-masked],curve25519-sha256,[email-masked],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-s,kex-strict-
> [email-masked]
> debug2: host key algorithms:
> rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
> debug2: ciphers ctos:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: ciphers stoc:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: MACs ctos:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,[email-masked]
> debug2: compression stoc: none,[email-masked]
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug3: kex_choose_conf: will use strict KEX ordering
> debug1: kex: algorithm: [email-masked]
> debug1: kex: host key algorithm: ssh-ed25519
> debug1: kex: server->client cipher: [email-masked] MAC:
> <implicit> compression: none
> debug1: kex: client->server cipher: [email-masked] MAC:
> <implicit> compression: none
> debug3: send packet: type 30
> debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
> debug3: receive packet: type 31
> debug1: SSH2_MSG_KEX_ECDH_REPLY received
> debug1: Server host key: ssh-ed25519
> SHA256:bEUuS3M3HkcKcTvcFe1sta6MJn3L+onAbDbqnchx7v4
> debug3: put_host_port: [127.0.0.1]:10022
> debug3: put_host_port: [localhost.dehnel.info]:10022
> debug3: record_hostkey: found key type ED25519 in file
> /home/nathan/.ssh/known_hosts:14
> debug3: record_hostkey: found key type RSA in file
> /home/nathan/.ssh/known_hosts:15
> debug3: record_hostkey: found key type ECDSA in file
> /home/nathan/.ssh/known_hosts:16
> debug3: load_hostkeys_file: loaded 3 keys from [localhost.dehnel.info]:10022
> debug1: load_hostkeys: fopen /home/nathan/.ssh/known_hosts2: No such
> file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file
> or directory
> debug1: Host '[localhost.dehnel.info]:10022' is known and matches the
> ED25519 host key.
> debug1: Found key in /home/nathan/.ssh/known_hosts:14
> debug3: send packet: type 21
> debug1: ssh_packet_send2_wrapped: resetting send seqnr 3
> debug2: ssh_set_newkeys: mode 1
> debug1: rekey out after 134217728 blocks
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: Sending SSH2_MSG_EXT_INFO
> debug3: send packet: type 7
> debug1: expecting SSH2_MSG_NEWKEYS
> debug3: receive packet: type 21
> debug1: ssh_packet_read_poll2: resetting read seqnr 3
> debug1: SSH2_MSG_NEWKEYS received
> debug2: ssh_set_newkeys: mode 0
> debug1: rekey in after 134217728 blocks
> debug2: KEX algorithms:
> [email-masked],curve25519-sha256,[email-masked],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-
> [email-masked]
> debug2: host key algorithms:
> [email-masked],[email-masked],[email-masked],ecdsa-sha2-n
> [email-masked],[email-masked],[email-masked],[email-masked],rsa-sha2-256-
> [email-masked],ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email-masked],[email-masked],r
> sa-sha2-512,rsa-sha2-256
> debug2: ciphers ctos:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: ciphers stoc:
> [email-masked],aes128-ctr,aes192-ctr,aes256-ctr,[email-masked],[email-masked]
> debug2: MACs ctos:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> [email-masked],[email-masked],[email-masked],[email-masked],[email-masked],um
> [email-masked],[email-masked],hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,[email-masked],zlib
> debug2: compression stoc: none,[email-masked],zlib
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug3: send packet: type 5
> debug3: receive packet: type 7
> debug1: SSH2_MSG_EXT_INFO received
> debug3: kex_input_ext_info: extension server-sig-algs
> debug1: kex_ext_info_client_parse:
> server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email-masked],sk-ec
> [email-masked],rsa-sha2-512,rsa-sha2-256>
> debug3: kex_input_ext_info: extension [email-masked]
> debug1: kex_ext_info_check_ver: [email-masked]=<0>
> debug3: kex_input_ext_info: extension [email-masked]
> debug1: kex_ext_info_check_ver: [email-masked]=<0>
> debug3: receive packet: type 6
> debug2: service_accept: ssh-userauth
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug3: send packet: type 50
> debug3: receive packet: type 7
> debug1: SSH2_MSG_EXT_INFO received
> debug3: kex_input_ext_info: extension server-sig-algs
> debug1: kex_ext_info_client_parse:
> server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email-masked],sk-ec
> [email-masked],rsa-sha2-512,rsa-sha2-256>
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug3: start over, passed a different list publickey,password
> debug3: preferred publickey,keyboard-interactive,password
> debug3: authmethod_lookup publickey
> debug3: remaining preferred: keyboard-interactive,password
> debug3: authmethod_is_enabled publickey
> debug1: Next authentication method: publickey
> debug1: Will attempt key: /home/nathan/.ssh/nathan-user-key RSA
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug1: Will attempt key: /home/nathan/.ssh/nathan-user-key RSA-CERT
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug2: pubkey_prepare: done
> debug1: Offering public key: /home/nathan/.ssh/nathan-user-key RSA
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug3: send packet: type 50
> debug2: we sent a publickey packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug1: Offering public key: /home/nathan/.ssh/nathan-user-key
> RSA-CERT SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug3: send packet: type 50
> debug2: we sent a publickey packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug2: we did not send a packet, disable method
> debug3: authmethod_lookup password
> debug3: remaining preferred: ,password
> debug3: authmethod_is_enabled password
> debug1: Next authentication method: password
> [email-masked]'s password:
> debug3: send packet: type 50
> debug2: we sent a password packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> Permission denied, please try again.
> [email-masked]'s password: