[GUACAMOLE-1461] Include libssh2 1.9.0 or later in guacd Docker image

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Component/s: guacd-docker
• Assignee: Unassigned
• Reporter: Patrick Young
• Created: 18/Nov/21 06:29
• Updated: 22/Nov/21 01:34
• Resolved: 19/Nov/21 02:41

Description

libssh2 has recently grown support for elliptic curve cryptography, including support for elliptic curve KEX algorithms. The current guacd Docker image doesn't inherit this support, however, because it uses Debian Buster as its base image. To have access to a newer libssh2, the guacd image will need to use at least Debian Bullseye.

It may be worth updating the image to simply point at Debian stable, assuming there is no longer any issue with the FreeRDP version included by that version of Debian. Meanwhile, the Jenkins build that performs nightly rebuilds of the established Docker images for the previous release can simply be updated to point to Debian Bullseye with its build args and thus magically become up-to-date.

Issue Links

• duplicates: GUACAMOLE-1315 SSH Handshake failed in verbose logging
• duplicates: GUACAMOLE-1447 Bump guacamole-server base image to latest stable version