unsupported_algo

Diagnostic `nanook::auth::unsupported_algo`

Summary

unsupported key algorithm `{0}`

Help

only ssh-ed25519 is supported

Details

When this fires

A key line started with an algorithm tag other than ssh-ed25519 (or ssh-ed25519-priv for private files). nanook only speaks ed25519, so anything like ssh-rsa, ecdsa-sha2-nistp256, or ssh-dss gets rejected at parse time. This shows up while loading [admin].authorized, an authorized_keys file, the local ~/.nanook/admin/id_ed25519, or the x-nanook-key header on an incoming request.

What to check

  • Generate a fresh ed25519 identity and copy the resulting .pub line onto the agent host's trust list:
nanook keygen
cat ~/.nanook/admin/id_ed25519.pub