[GUACAMOLE-1930] ssh host verification not working | docker

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.5.4
• Component/s: guacamole
• Environment: host os: Debian GNU/Linux 12 (bookworm) ; Docker version 25.0.3, build 4debf41 ; Containers: ; guacamole/guacd ; guacamole/guacamole
• Assignee: Unassigned
• Reporter: Tomas
• Created: 14/Mar/24 12:07
• Updated: 14/Mar/24 18:57

Description

I've installed guacamole - your docker version, but I've got problems logging into ssh sessions with any kind of host verification.

docker config:

docker run \
  -d \
  --net brig \
  --ip 10.0.0.6 \
  -p 4822:4822 \
  --name guacamole-guacd \
  --restart always \
guacamole/guacd

docker run \
  -d \
  --net brig \
  --ip 10.0.0.7 \
  -p 8001:8080 \
  --name apache-guacamole \
  --restart always \
  -e TZ=Europe/Prague \
  -e GUACD_HOSTNAME=10.0.0.6 \
  -e GUACD_PORT=4822 \
  -e MYSQL_HOSTNAME=10.0.0.5 \
  -e MYSQL_PORT=3306 \
  -e MYSQL_DATABASE=aguacamole \
  -e MYSQL_USER=aguacamole \
  -e MYSQL_PASSWORD=mypw \
  -v /media/AppData/volumes/aguacamole_volume/_data/home-guacamole:/home/guacamole \
guacamole/guacamole

I followed your documentation, how to put a known_hosts record into the connection profile (Public host key (Base64)), tried following:

testpc.test.com ssh-ed25519 XXXABCDEFGHNVjaOK+MgqlZSHPoNHHpuptJAOxYW6o
ssh-ed25519 XXXABCDEFGHNVjaOK+MgqlZSHPoNHHpuptJAOxYW6o

however the result has been always:

guacd[1531]: INFO: User "@03827a1f-b013-4d5c-afdb-6cb08f19e56b" joined connection "$2df823fa-d766-40e8-8f1f-f7dae923dc2d" (1 users now present)
guacd[1531]: ERROR: Host key not found for testpc.test.com.
guacd[1531]: ERROR: Host key did not match any provided known host keys. 
guacd[1531]: INFO: User "@03827a1f-b013-4d5c-afdb-6cb08f19e56b" disconnected (0 users remain)
guacd[1531]: INFO: Last user of connection "$2df823fa-d766-40e8-8f1f-f7dae923dc2d" disconnected

I tried to put also "ssh_known_hosts" file into GUACAMOLE_HOME with the same records, however, the file gets ignored... and it's same as if I don't setup any key. They connection establishes, but without any verification.

guacd[72]: INFO: User "@ba02fef7-0ba5-4871-a7a9-2cd1964b580d" joined connection "$addd82d3-df83-4485-9baa-8af059817a4d" (1 users now present)
guacd[72]: WARNING: No known host keys provided, host identity will not be verified.
guacd[72]: WARNING: Unable to set the timezone: SSH server refused to set "TZ" variable.
guacd[72]: WARNING: No known host keys provided, host identity will not be verified.
guacd[72]: INFO: SSH connection successful.

Is there a way to fix this please? I also tried increasing log verbosity with

-e LOGBACK_LEVEL=DEBUG

on guacd container, but it did not make what it was supposed to do. Thank you, any advice apreciated.