bad_key
Diagnostic `nanook::auth::bad_key`
Summary
malformed key line in `{0}`
Help
expected ssh-ed25519 <base64-32-bytes> [comment]
Details
When this fires
A key line did not match the expected SSH-style shape ssh-ed25519 <base64-32-bytes> [comment]. The path in the error tells you where it came from: an authorized_keys file, the [admin].authorized array in nanook.toml, the x-nanook-key header on a request, or the on-disk identity at ~/.nanook/admin/id_ed25519. The agent will reject the file at startup or the request at runtime, so nanook ctl calls fail with a 401-shaped error.
What to check
- Each key is one line with exactly two or three whitespace-separated fields. No quotes, no PEM wrappers, no line wrapping in the base64.
- When in doubt, regenerate with
nanook keygenand copy the resulting.publine verbatim.