From 22a6cda004647a59552c3ff81dbfabc73fe93c52 Mon Sep 17 00:00:00 2001 From: Bert Wesarg <bert.wesarg@tu-dresden.de> Date: Wed, 10 Apr 2024 14:07:44 +0200 Subject: [PATCH] Improve readability of fingerprints by using monospace Add instruction how to show fingerprint without login. --- .../docs/access/key_fingerprints.md | 142 ++++++++++-------- 1 file changed, 78 insertions(+), 64 deletions(-) diff --git a/doc.zih.tu-dresden.de/docs/access/key_fingerprints.md b/doc.zih.tu-dresden.de/docs/access/key_fingerprints.md index d3b754f7d..5dc3b26d3 100644 --- a/doc.zih.tu-dresden.de/docs/access/key_fingerprints.md +++ b/doc.zih.tu-dresden.de/docs/access/key_fingerprints.md @@ -27,20 +27,34 @@ approved again. In this case, the fingerprint matches the one given in the table. Thus, you can proceed by typing 'yes'. +To verify the keys without logging into the individual hosts, use `ssh-keyscan` and `ssh-keygen`: + +```console +marie@local$ ssh-keyscan login1.barnard.hpc.tu-dresden.de 2>/dev/null| ssh-keygen -l -f - +# login1.barnard.hpc.tu-dresden.de:22 SSH-2.0-OpenSSH_8.0 +# login1.barnard.hpc.tu-dresden.de:22 SSH-2.0-OpenSSH_8.0 +# login1.barnard.hpc.tu-dresden.de:22 SSH-2.0-OpenSSH_8.0 +# login1.barnard.hpc.tu-dresden.de:22 SSH-2.0-OpenSSH_8.0 +# login1.barnard.hpc.tu-dresden.de:22 SSH-2.0-OpenSSH_8.0 +3072 SHA256:lVQOvnci07jkxmFnX58pQf3cD7lz1mf4K4b9jZrAlVU login1.barnard.hpc.tu-dresden.de (RSA) +256 SHA256:Xan2MYazewT0V5agNazaQfWzLKBD3P48zRwR6reoXhI login1.barnard.hpc.tu-dresden.de (ECDSA) +256 SHA256:Gn4n5IX9eEvkpOGrtZzs9T9yAfJUB200bgRchchiKAQ login1.barnard.hpc.tu-dresden.de (ED25519) +``` + ## Barnard The cluster [`Barnard`](../jobs_and_resources/barnard.md) can be accessed via the four login nodes `login[1-4].barnard.hpc.tu-dresden.de`. (Please choose one concrete login node when connecting, see example below.) -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:lVQOvnci07jkxmFnX58pQf3cD7lz1mf4K4b9jZrAlVU | -| RSA | MD5:5b:39:ae:03:3a:60:15:21:4b:e8:ba:72:52:b8:a1:ad | -| ECDSA | SHA256:Xan2MYazewT0V5agNazaQfWzLKBD3P48zRwR6reoXhI | -| ECDSA | MD5:02:fd:ab:c8:39:f9:94:cc:3f:e0:7e:78:5f:76:b8:4c | -| ED25519 | SHA256:Gn4n5IX9eEvkpOGrtZzs9T9yAfJUB200bgRchchiKAQ | -| ED25519 | MD5:e8:10:96:67:e8:4c:fd:87:f0:c6:4e:e8:1f:53:a9:be | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:lVQOvnci07jkxmFnX58pQf3cD7lz1mf4K4b9jZrAlVU` | +| RSA | `MD5:5b:39:ae:03:3a:60:15:21:4b:e8:ba:72:52:b8:a1:ad` | +| ECDSA | `SHA256:Xan2MYazewT0V5agNazaQfWzLKBD3P48zRwR6reoXhI` | +| ECDSA | `MD5:02:fd:ab:c8:39:f9:94:cc:3f:e0:7e:78:5f:76:b8:4c` | +| ED25519 | `SHA256:Gn4n5IX9eEvkpOGrtZzs9T9yAfJUB200bgRchchiKAQ` | +| ED25519 | `MD5:e8:10:96:67:e8:4c:fd:87:f0:c6:4e:e8:1f:53:a9:be` | {: summary="List of valid fingerprints for Barnard login[1-4] nodes"} ## Romeo @@ -49,14 +63,14 @@ The cluster [`Romeo`](../jobs_and_resources/romeo.md) can be accessed via the tw login nodes `login[1-2].romeo.hpc.tu-dresden.de`. (Please choose one concrete login node when connecting, see example below.) -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -|RSA | SHA256:BvYEYJtIYDGr3U0up58q5F7aog7JA2RP+w53XKmwO8I | -|RSA | MD5:5d:dc:40:3b:8b:89:77:5d:0f:29:84:31:0f:73:25:9f | -|ECDSA | SHA256:lgxNRgGcKe7oDGuwf0WV9VPukA30kEqg0sNDLLQwu8Y | -|ECDSA | MD5:e1:bd:e4:77:06:97:f9:f3:03:18:56:66:14:5d:8d:18 | -|ED25519 | SHA256:QNjH0ulelqykywMkt3UNTG4W1HzRkHqrhu0f6oq302I | -|ED25519 | MD5:e4:4e:7a:76:aa:87:da:17:92:b1:17:c6:a1:25:29:7e | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +|RSA | `SHA256:BvYEYJtIYDGr3U0up58q5F7aog7JA2RP+w53XKmwO8I` | +|RSA | `MD5:5d:dc:40:3b:8b:89:77:5d:0f:29:84:31:0f:73:25:9f` | +|ECDSA | `SHA256:lgxNRgGcKe7oDGuwf0WV9VPukA30kEqg0sNDLLQwu8Y` | +|ECDSA | `MD5:e1:bd:e4:77:06:97:f9:f3:03:18:56:66:14:5d:8d:18` | +|ED25519 | `SHA256:QNjH0ulelqykywMkt3UNTG4W1HzRkHqrhu0f6oq302I` | +|ED25519 | `MD5:e4:4e:7a:76:aa:87:da:17:92:b1:17:c6:a1:25:29:7e` | {: summary="List of valid fingerprints for Romeo login[1-2] node"} ## Alpha Centauri @@ -65,14 +79,14 @@ The cluster [`Alpha Centauri`](../jobs_and_resources/alpha_centauri.md) can be a login nodes `login[1-2].alpha.hpc.tu-dresden.de`. (Please choose one concrete login node when connecting, see example below.) -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:BvYEYJtIYDGr3U0up58q5F7aog7JA2RP+w53XKmwO8I | -| RSA | MD5:5d:dc:40:3b:8b:89:77:5d:0f:29:84:31:0f:73:25:9f | -| ECDSA | SHA256:lgxNRgGcKe7oDGuwf0WV9VPukA30kEqg0sNDLLQwu8Y | -| ECDSA | MD5:e1:bd:e4:77:06:97:f9:f3:03:18:56:66:14:5d:8d:18 | -| ED25519 | SHA256:QNjH0ulelqykywMkt3UNTG4W1HzRkHqrhu0f6oq302I | -| ED25519 | MD5:e4:4e:7a:76:aa:87:da:17:92:b1:17:c6:a1:25:29:7e | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:BvYEYJtIYDGr3U0up58q5F7aog7JA2RP+w53XKmwO8I` | +| RSA | `MD5:5d:dc:40:3b:8b:89:77:5d:0f:29:84:31:0f:73:25:9f` | +| ECDSA | `SHA256:lgxNRgGcKe7oDGuwf0WV9VPukA30kEqg0sNDLLQwu8Y` | +| ECDSA | `MD5:e1:bd:e4:77:06:97:f9:f3:03:18:56:66:14:5d:8d:18` | +| ED25519 | `SHA256:QNjH0ulelqykywMkt3UNTG4W1HzRkHqrhu0f6oq302I` | +| ED25519 | `MD5:e4:4e:7a:76:aa:87:da:17:92:b1:17:c6:a1:25:29:7e` | {: summary="List of valid fingerprints for Alpha Centauri login[1-2] node"} ## Julia @@ -80,14 +94,14 @@ connecting, see example below.) The cluster [`Julia`](../jobs_and_resources/julia.md) can be accessed via `julia.hpc.tu-dresden.de`. (Note, there is no separate login node.) -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | | -| RSA | | -| ECDSA | | -| ECDSA | | -| ED25519 | | -| ED25519 | | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:MPRhcFxLstI76W8Sg/5KiQlGPVOHUGM/B0+qIZHFj9E` | +| RSA | `MD5:5f:22:e2:e2:c3:dc:b1:ee:a9:ba:61:af:34:f6:27:f0` | +| ECDSA | `SHA256:LkHMlx6VewoPBvOhmNbue8kBsvlljtsEAjCZA8vxRWc` | +| ECDSA | `MD5:3f:5a:f2:f9:9d:30:5c:83:c0:e5:0e:87:42:1a:d8:b0` | +| ED25519 | `SHA256:k5zc2E0Y8zcLErDD1Ej3g0OqkoLDF22ADmfX+b+8Z9g` | +| ED25519 | `MD5:41:03:a2:7c:e9:4d:1c:bd:30:77:7d:91:d7:93:9f:8c` | {: summary="List of valid fingerprints for Julia login node"} ## IBM Power9 @@ -97,14 +111,14 @@ nodes `tauruslogin[3-6].hrsk.tu-dresden.de` or shortly `taurus.hrsk.tu-dresden.d All of these login nodes share common keys. When connecting, please make sure that the fingerprint shown matches one of the table. -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:/M1lW1KTOlxj8UFZJS4tLi+8TyndcDqrZfLGX7KAU8s | -| RSA | MD5:b8:e1:21:ed:38:1a:ba:1a:5b:2b:bc:35:31:62:21:49 | -| ECDSA | SHA256:PeCpW/gAFLvHDzTP2Rb93NxD+rpUsyQY8WebjQC7kz0 | -| ECDSA | MD5:47:7e:24:46:ab:30:59:2c:1f:e8:fd:37:2a:5d:ee:25 | -| ED25519 | SHA256:nNxjtCny1kB0N0epHaOPeY1YFd0ri2Dvt2CK7rOGlXg | -| ED25519 | MD5:7c:0c:2b:8b:83:21:b2:08:19:93:6d:03:80:76:8a:7b | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:/M1lW1KTOlxj8UFZJS4tLi+8TyndcDqrZfLGX7KAU8s` | +| RSA | `MD5:b8:e1:21:ed:38:1a:ba:1a:5b:2b:bc:35:31:62:21:49` | +| ECDSA | `SHA256:PeCpW/gAFLvHDzTP2Rb93NxD+rpUsyQY8WebjQC7kz0` | +| ECDSA | `MD5:47:7e:24:46:ab:30:59:2c:1f:e8:fd:37:2a:5d:ee:25` | +| ED25519 | `SHA256:nNxjtCny1kB0N0epHaOPeY1YFd0ri2Dvt2CK7rOGlXg` | +| ED25519 | `MD5:7c:0c:2b:8b:83:21:b2:08:19:93:6d:03:80:76:8a:7b` | {: summary="List of valid fingerprints for login nodes"} ## Export Nodes @@ -118,14 +132,14 @@ The following hostnames can be used to transfer files to/from ZIH systems: - `taurusexport3.hrsk.tu-dresden.de` - `taurusexport4.hrsk.tu-dresden.de` -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:Qjg79R+5x8jlyHhLBZYht599vRk+SujnG1yT1l2dYUM | -| RSA | MD5:1e:4c:2d:81:ee:58:1b:d1:3c:0a:18:c4:f7:0b:23:20 | -| ECDSA | SHA256:qXTZnZMvdqTs3LziA12T1wkhNcFqTHe59fbbU67Qw3g | -| ECDSA | MD5:96:62:c6:80:a8:1f:34:64:86:f3:cf:c5:9b:cd:af:da | -| ED25519 | SHA256:jxWiddvDe0E6kpH55PHKF0AaBg/dQLefQaQZ2P4mb3o | -| ED25519 | MD5:fe:0a:d2:46:10:4a:08:40:fd:e1:99:b7:f2:06:4f:bc | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:Qjg79R+5x8jlyHhLBZYht599vRk+SujnG1yT1l2dYUM` | +| RSA | `MD5:1e:4c:2d:81:ee:58:1b:d1:3c:0a:18:c4:f7:0b:23:20` | +| ECDSA | `SHA256:qXTZnZMvdqTs3LziA12T1wkhNcFqTHe59fbbU67Qw3g` | +| ECDSA | `MD5:96:62:c6:80:a8:1f:34:64:86:f3:cf:c5:9b:cd:af:da` | +| ED25519 | `SHA256:jxWiddvDe0E6kpH55PHKF0AaBg/dQLefQaQZ2P4mb3o` | +| ED25519 | `MD5:fe:0a:d2:46:10:4a:08:40:fd:e1:99:b7:f2:06:4f:bc` | {: summary="List of valid fingerprints for export nodes"} ## Dataport Nodes @@ -133,22 +147,22 @@ The following hostnames can be used to transfer files to/from ZIH systems: When you transfer files using the [dataport nodes](../data_transfer/dataport_nodes.md), please make sure that the fingerprint shown matches one of the table. -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:t4Vl4rHRHbglZIm+hck2MWld+0smYAb2rx7EGWWmya0 | -| RSA | MD5:59:7f:c1:7b:34:ec:c8:07:3d:fe:b8:b5:6a:96:ea:0c | -| ECDSA | SHA256:Ga1dXpp1yM5GRJC77PgDCQwDy7oHdrTY7z11V1Eq1L8 | -| ECDSA | MD5:43:1b:b8:f6:23:ab:4a:08:dc:a1:b3:09:8c:8c:be:f9 | -| ED25519 | SHA256:SRYDLKt7YTQkXmkv+doWV/b55xQz1nT4ZZtXYGhydg4 | -| ED25519 | MD5:eb:96:21:d7:61:9f:39:10:82:b9:21:e9:4a:87:c2:9a | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:t4Vl4rHRHbglZIm+hck2MWld+0smYAb2rx7EGWWmya0` | +| RSA | `MD5:59:7f:c1:7b:34:ec:c8:07:3d:fe:b8:b5:6a:96:ea:0c` | +| ECDSA | `SHA256:Ga1dXpp1yM5GRJC77PgDCQwDy7oHdrTY7z11V1Eq1L8` | +| ECDSA | `MD5:43:1b:b8:f6:23:ab:4a:08:dc:a1:b3:09:8c:8c:be:f9` | +| ED25519 | `SHA256:SRYDLKt7YTQkXmkv+doWV/b55xQz1nT4ZZtXYGhydg4` | +| ED25519 | `MD5:eb:96:21:d7:61:9f:39:10:82:b9:21:e9:4a:87:c2:9a` | {: summary="List of valid fingerprints for dataport1.hpc.tu-dresden.de"} -| Key Type | Fingerprint | -|:---------|:----------------------------------------------------| -| RSA | SHA256:aMVmc3E0+ndXPiQ8EpY6lFk5CFdfGJfjy/0UBcxor58 | -| RSA | MD5:03:b8:8a:2b:10:e5:6b:c8:0b:78:ab:4e:5b:2c:0e:2c | -| ECDSA | SHA256:6t69R86zhJjGDlIobdsSbKFn8Km3cs9JYWlDW22nEvI | -| ECDSA | MD5:58:70:7d:df:e5:c8:43:cf:a5:75:ad:f5:da:9f:1a:6d | -| ED25519 | SHA256:KAD9xwCRK5C8Ch6Idfnfy88XrzZcqEJ9Ms6O+AzGfDE | -| ED25519 | MD5:2b:61:5a:89:fe:96:95:0d:3d:f6:29:40:55:ea:e6:11 | +| Key Type | Fingerprint | +|:---------|:------------------------------------------------------| +| RSA | `SHA256:aMVmc3E0+ndXPiQ8EpY6lFk5CFdfGJfjy/0UBcxor58` | +| RSA | `MD5:03:b8:8a:2b:10:e5:6b:c8:0b:78:ab:4e:5b:2c:0e:2c` | +| ECDSA | `SHA256:6t69R86zhJjGDlIobdsSbKFn8Km3cs9JYWlDW22nEvI` | +| ECDSA | `MD5:58:70:7d:df:e5:c8:43:cf:a5:75:ad:f5:da:9f:1a:6d` | +| ED25519 | `SHA256:KAD9xwCRK5C8Ch6Idfnfy88XrzZcqEJ9Ms6O+AzGfDE` | +| ED25519 | `MD5:2b:61:5a:89:fe:96:95:0d:3d:f6:29:40:55:ea:e6:11` | {: summary="List of valid fingerprints for dataport2.hpc.tu-dresden.de"} -- GitLab