ACCESS-NRI / payu-condaenv

A conda (mamba) python environment for running payu
Apache License 2.0
0 stars 2 forks source link

Update openssl for commit signing #20

Closed aidanheerdegen closed 7 months ago

aidanheerdegen commented 9 months ago

git is included in the payu module installed under vk83

$ which git
/g/data/vk83/apps/payu/1.1/bin/git
$ git --version
git version 2.43.0

This is a good thing.

However the default openssl libraries on gadi do not support ssh signing:

error: ssh-keygen -Y sign is needed for ssh signing (available in openssh version 8.2p1+)
error: unknown option -- Y?

On gadi:

$ ssh -V
OpenSSH_8.0p1, OpenSSL 1.1.1k  FIPS 25 Mar 2021
$ which ssh
/bin/ssh

If I use the hh5 conda/analysis environment it works because they have openssh installed:

$ conda list openssh
# packages in environment at /g/data/hh5/public/apps/miniconda3/envs/analysis3-23.07:
#
# Name                    Version                   Build  Channel
openssh                   9.3p1                hbcd7760_1    conda-forge
$ which ssh
/g/data/hh5/public/apps/miniconda3/envs/analysis3-23.07/bin/ssh
$ ssh -V
OpenSSH_9.3p1, OpenSSL 3.1.4 24 Oct 2023

We should add openssh>=8.3 as a requirement for our payu conda environment.