Skip to content

Izar system update#

Starting from Monday, 28th of August and for a period of two days, the Izar cluster will be unavailable to the users due to the migration from RHEL 7 to RHEL 8.

As part of this maintenance, the software stack will also be updated to newer versions of the compilers, programs, and libraries.

SSH keys#

During the maintenance the ssh keys of the front node have been changed. The new keys are

ECDSA
    MD5:75:bf:66:87:94:39:94:93:9a:be:b5:06:2a:89:a4:67
    SHA256:CmnfF53AEyqgT0t0PfoRRxZ/3cLbanzMPZ4jcEmlItw
ED25519
    MD5:2a:9e:b4:bd:d5:2c:0c:7e:22:db:a9:b3:fb:ab:13:b6
    SHA256:q327bbvtHQTCLisv7au0d3rxw2JWO/+l3Gn2l0Z8AD4
RSA
    MD5:63:eb:8c:b5:d8:ef:2f:df:c1:9f:ab:85:c3:30:29:2c
    SHA256:JVMVBiqHiXVjcwzIpISxtxZHArjfYbBjoV6o3XUbkoA

So if you get a message like this one:

$ ssh izar
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:q327bbvtHQTCLisv7au0d3rxw2JWO/+l3Gn2l0Z8AD4.
Please contact your system administrator.
Add correct host key in /home/richart/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/richart/.ssh/known_hosts:20
  remove with:
  ssh-keygen -f "/home/richart/.ssh/known_hosts" -R "izar.epfl.ch"
Host key for izar.epfl.ch has changed and you have requested strict checking.
Host key verification failed.

It is normal as long as the fingerprint shown is one of izar's. If it is the case you can erase the old fingerprint using the command:

$ ssh-keygen -f "/home/<GASPAR>/.ssh/known_hosts" -R "izar.epfl.ch"