From 805d800907d4666f3864c6ad8af6b3e881bbcf38 Mon Sep 17 00:00:00 2001 From: Akshit Joshi Date: Tue, 30 Jun 2026 21:28:54 +0530 Subject: [PATCH 1/4] Add SSH host key fingerprints for dev desktops --- src/infra/docs/dev-desktop.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/src/infra/docs/dev-desktop.md b/src/infra/docs/dev-desktop.md index d474af5c3..d633cc19f 100644 --- a/src/infra/docs/dev-desktop.md +++ b/src/infra/docs/dev-desktop.md @@ -68,6 +68,34 @@ Host rustvm Then you can connect with `ssh rustvm`. +## SSH host key fingerprints + +When connecting to a dev desktop for the first time, you should verify the +SSH host key fingerprint. The following fingerprints are used by the dev +desktops. + +| Machine | ED25519 | +|---------------------|------------------------------------------------------------| +| `dev-desktop-eu-1` | `SHA256:QPuC8ODm+no9wjAtrSMCuqj+iGXsFI5ZGR3C+nX7Im0` | +| `dev-desktop-us-1` | `SHA256:UOZn6OKFrCRt+CLPl5fHZd93Tym4ckBrr8rgfgEPT5g` | +| `dev-desktop-eu-2` | `SHA256:biz6c8LJ6cdb6Ku9mlELzl1qh8sODZWtpNfAJPxBi2I` | +| `dev-desktop-us-2` | `SHA256:u6SNCQw++6LV+IhQYEqIcuFo4GIaiU7DyUhaqWEmQdI` | + +You can verify the fingerprint by running: + +```shell +ssh-keygen -lf <(ssh-keyscan .infra.rust-lang.org 2>/dev/null | grep -v '^#') +``` + +For convenience, the host keys are also available as `known_hosts` entries: + +```text +dev-desktop-eu-1.infra.rust-lang.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAIIWlDvWkMEX8XIu6lxvd4cFOxeFUpH4ZReKuyS3h9l +dev-desktop-us-1.infra.rust-lang.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEj0DZ/r/Sq5GdK8j80rNjCs6ctwptcHnFvP3bdjhv/5 +dev-desktop-eu-2.infra.rust-lang.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOmnv10fXAimjPPfwiutVmJifRS+85rmN/zyIP/QNby6 +dev-desktop-us-2.infra.rust-lang.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA2bWm/W7J3QJGRb2z63Mp8nP5rAXOEd1Owd54Wtt5AX +``` + ## How to set up your account When connecting to the machine for the first time, there are a few things you From 679d149b1cdad57e45f2ce684dfe99b15cd2c822 Mon Sep 17 00:00:00 2001 From: MarcoIeni <11428655+MarcoIeni@users.noreply.github.com> Date: Wed, 1 Jul 2026 08:42:43 +0200 Subject: [PATCH 2/4] fix markdown table --- src/infra/docs/dev-desktop.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/src/infra/docs/dev-desktop.md b/src/infra/docs/dev-desktop.md index d633cc19f..c279a2bbb 100644 --- a/src/infra/docs/dev-desktop.md +++ b/src/infra/docs/dev-desktop.md @@ -74,12 +74,12 @@ When connecting to a dev desktop for the first time, you should verify the SSH host key fingerprint. The following fingerprints are used by the dev desktops. -| Machine | ED25519 | -|---------------------|------------------------------------------------------------| -| `dev-desktop-eu-1` | `SHA256:QPuC8ODm+no9wjAtrSMCuqj+iGXsFI5ZGR3C+nX7Im0` | -| `dev-desktop-us-1` | `SHA256:UOZn6OKFrCRt+CLPl5fHZd93Tym4ckBrr8rgfgEPT5g` | -| `dev-desktop-eu-2` | `SHA256:biz6c8LJ6cdb6Ku9mlELzl1qh8sODZWtpNfAJPxBi2I` | -| `dev-desktop-us-2` | `SHA256:u6SNCQw++6LV+IhQYEqIcuFo4GIaiU7DyUhaqWEmQdI` | +| Machine | ED25519 | +|--------------------|------------------------------------------------------| +| `dev-desktop-eu-1` | `SHA256:QPuC8ODm+no9wjAtrSMCuqj+iGXsFI5ZGR3C+nX7Im0` | +| `dev-desktop-us-1` | `SHA256:UOZn6OKFrCRt+CLPl5fHZd93Tym4ckBrr8rgfgEPT5g` | +| `dev-desktop-eu-2` | `SHA256:biz6c8LJ6cdb6Ku9mlELzl1qh8sODZWtpNfAJPxBi2I` | +| `dev-desktop-us-2` | `SHA256:u6SNCQw++6LV+IhQYEqIcuFo4GIaiU7DyUhaqWEmQdI` | You can verify the fingerprint by running: From 5aaba41c6353ecf96d8e563e425d2f9f7818d726 Mon Sep 17 00:00:00 2001 From: MarcoIeni <11428655+MarcoIeni@users.noreply.github.com> Date: Wed, 1 Jul 2026 08:47:44 +0200 Subject: [PATCH 3/4] specify fingerprint type --- src/infra/docs/dev-desktop.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/infra/docs/dev-desktop.md b/src/infra/docs/dev-desktop.md index c279a2bbb..6086e0fce 100644 --- a/src/infra/docs/dev-desktop.md +++ b/src/infra/docs/dev-desktop.md @@ -84,7 +84,7 @@ desktops. You can verify the fingerprint by running: ```shell -ssh-keygen -lf <(ssh-keyscan .infra.rust-lang.org 2>/dev/null | grep -v '^#') +ssh-keygen -lf <(ssh-keyscan -t ed25519 .infra.rust-lang.org 2>/dev/null | grep -v '^#') ``` For convenience, the host keys are also available as `known_hosts` entries: From 89291b08b43ba87ee100edfa1ccd31b1143bbe98 Mon Sep 17 00:00:00 2001 From: MarcoIeni <11428655+MarcoIeni@users.noreply.github.com> Date: Wed, 1 Jul 2026 08:55:38 +0200 Subject: [PATCH 4/4] clarify instructions --- src/infra/docs/dev-desktop.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/infra/docs/dev-desktop.md b/src/infra/docs/dev-desktop.md index 6086e0fce..7a86dbbc3 100644 --- a/src/infra/docs/dev-desktop.md +++ b/src/infra/docs/dev-desktop.md @@ -81,7 +81,7 @@ desktops. | `dev-desktop-eu-2` | `SHA256:biz6c8LJ6cdb6Ku9mlELzl1qh8sODZWtpNfAJPxBi2I` | | `dev-desktop-us-2` | `SHA256:u6SNCQw++6LV+IhQYEqIcuFo4GIaiU7DyUhaqWEmQdI` | -You can verify the fingerprint by running: +You can verify the fingerprint by running this script and compare the output with the table above: ```shell ssh-keygen -lf <(ssh-keyscan -t ed25519 .infra.rust-lang.org 2>/dev/null | grep -v '^#')