bad_key

Diagnostic `nanook::auth::bad_key`

Summary

malformed key line in `{0}`

Help

expected ssh-ed25519 <base64-32-bytes> [comment]

Details

When this fires

A key line did not match the expected SSH-style shape ssh-ed25519 <base64-32-bytes> [comment]. The path in the error tells you where it came from: an authorized_keys file, the [admin].authorized array in nanook.toml, the x-nanook-key header on a request, or the on-disk identity at ~/.nanook/admin/id_ed25519. The agent will reject the file at startup or the request at runtime, so nanook ctl calls fail with a 401-shaped error.

What to check

  • Each key is one line with exactly two or three whitespace-separated fields. No quotes, no PEM wrappers, no line wrapping in the base64.
  • When in doubt, regenerate with nanook keygen and copy the resulting .pub line verbatim.