search

containers / buildah

A tool that facilitates building OCI images.
https://buildah.io
Apache License 2.0
7.44k stars 784 forks source link

buildah's ssh-agent in passthru mode does not work with openssh >= 8.8 #4636

Closed Andre-85 closed 1 year ago

Andre-85 commented 1 year ago

Hi to everyone, i discovered following problem with buildah 1.23.1 (but i think also all later versions): If I'm trying to use ssh while building an Ubuntu 22.04 image with buildah's builtin sshagent (i.e. building with buildah build --ssh=default -f .) then the build fails with ssh error message agent key returned incorrect signature type.

My minimalistic Containerfile for testing:

FROM ubuntu:22.04

RUN apt update && apt-get -y install git
RUN --mount=type=ssh GIT_SSH_COMMAND="ssh -vvv -o StrictHostKeyChecking=no" git clone ssh://<MYGITSERVER>

I think I also find the reason: buildah's ssh-agent is build on top of golang.org/x/crypto/ssh/agent Agent type (in file pkg/sshagent/sshagent.go), but this does not pay attention to the flags in the ssh-agent's signing request (needed for producing SHA256 and SHA512 signatures) (s.a.: https://datatracker.ietf.org/doc/html/draft-miller-ssh-agent-04#section-4.5.1). So even a SHA256 or a SHA512 signature is requested by the ssh client at the buildah's ssh-agent, it will return a SHA1 signature which triggers the agent key returned incorrect signature type warning message. But starting with openssh 8.8 SHA1 signatures are seen as too insecure, and the ssh client refuses to work with this signature.

Possible solution: I've seen that there is also an ExtendedAgent in golang.org/x/crypto/ssh/agent (https://pkg.go.dev/golang.org/x/crypto/ssh/agent#ExtendedAgent ) which derives from Agent, but it seams to support the needed signature flags. Think replacing Agent by ExtendedAgent resolves this problem.

My personal problem is that i got no experience in go, so can anyone help? Since a got a complete test setup, i could do the necessary tests.

Thanks in advance.

apt list output Listing... Done buildah/jammy,now 1.23.1+ds1-2 amd64 [installed,automatic]

*cat /etc/-release output** DISTRIB_ID=Ubuntu DISTRIB_RELEASE=22.04 DISTRIB_CODENAME=jammy DISTRIB_DESCRIPTION="Ubuntu 22.04 LTS" PRETTY_NAME="Ubuntu 22.04 LTS" NAME="Ubuntu" VERSION_ID="22.04" VERSION="22.04 (Jammy Jellyfish)" VERSION_CODENAME=jammy ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME=jammy

buildah version output Version: 1.23.1 Go Version: go1.17 Image Spec: 1.0.1 Runtime Spec: 1.0.2-dev CNI Spec: 0.4.0 libcni Version:
image Version: 5.16.0 Git Commit:
Built: Thu Jan 1 01:00:00 1970 OS/Arch: linux/amd64 BuildPlatform: linux/amd64

uname -a output Linux wagner-Latitude-5420 5.15.0-27-generic #28-Ubuntu SMP Thu Apr 14 04:55:28 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

Complete buildah output:

STEP 1/3: FROM ubuntu:22.04
STEP 2/3: RUN apt update && apt-get -y install git

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Hit:1 http://archive.ubuntu.com/ubuntu jammy InRelease
Reading package lists...
Building dependency tree...
All packages are up to date.
Reading package lists...
Building dependency tree...
The following additional packages will be installed:
  ca-certificates git-man libbrotli1 libbsd0 libcbor0.8 libcurl3-gnutls
  libedit2 liberror-perl libexpat1 libfido2-1 libldap-2.5-0 libmd0
  libnghttp2-14 librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db
  libssh-4 openssh-client openssl
Suggested packages:
  gettext-base git-daemon-run | git-daemon-sysvinit git-doc git-email git-gui
  gitk gitweb git-cvs git-mediawiki git-svn libsasl2-modules-gssapi-mit
  | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp
  libsasl2-modules-sql keychain libpam-ssh monkeysphere ssh-askpass
Recommended packages:
  less libldap-common xauth
The following NEW packages will be installed:
  ca-certificates git git-man libbrotli1 libbsd0 libcbor0.8 libcurl3-gnutls
  libedit2 liberror-perl libexpat1 libfido2-1 libldap-2.5-0 libmd0
  libnghttp2-14 librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db
  libssh-4 openssh-client openssl
0 upgraded, 21 newly installed, 0 to remove and 0 not upgraded.
Need to get 7951 kB of archives.
After this operation, 31.3 MB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 openssl amd64 3.0.2-0ubuntu1.7 [1183 kB]
Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 ca-certificates all 20211016ubuntu0.22.04.1 [144 kB]
Get:3 http://archive.ubuntu.com/ubuntu jammy/main amd64 libmd0 amd64 1.0.4-1build1 [23.0 kB]
Get:4 http://archive.ubuntu.com/ubuntu jammy/main amd64 libbsd0 amd64 0.11.5-1 [44.8 kB]
Get:5 http://archive.ubuntu.com/ubuntu jammy/main amd64 libexpat1 amd64 2.4.7-1ubuntu0.2 [91.0 kB]
Get:6 http://archive.ubuntu.com/ubuntu jammy/main amd64 libcbor0.8 amd64 0.8.0-2ubuntu1 [24.6 kB]
Get:7 http://archive.ubuntu.com/ubuntu jammy/main amd64 libedit2 amd64 3.1-20210910-1build1 [96.8 kB]
Get:8 http://archive.ubuntu.com/ubuntu jammy/main amd64 libfido2-1 amd64 1.10.0-1 [82.8 kB]
Get:9 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnghttp2-14 amd64 1.43.0-1build3 [76.3 kB]
Get:10 http://archive.ubuntu.com/ubuntu jammy/main amd64 openssh-client amd64 1:8.9p1-3ubuntu0.1 [908 kB]
Get:11 http://archive.ubuntu.com/ubuntu jammy/main amd64 libbrotli1 amd64 1.0.9-2build6 [315 kB]
Get:12 http://archive.ubuntu.com/ubuntu jammy/main amd64 libsasl2-modules-db amd64 2.1.27+dfsg2-3ubuntu1.1 [20.6 kB]
Get:13 http://archive.ubuntu.com/ubuntu jammy/main amd64 libsasl2-2 amd64 2.1.27+dfsg2-3ubuntu1.1 [53.8 kB]
Get:14 http://archive.ubuntu.com/ubuntu jammy/main amd64 libldap-2.5-0 amd64 2.5.13+dfsg-0ubuntu0.22.04.1 [183 kB]
Get:15 http://archive.ubuntu.com/ubuntu jammy/main amd64 librtmp1 amd64 2.4+20151223.gitfa8646d.1-2build4 [58.2 kB]
Get:16 http://archive.ubuntu.com/ubuntu jammy/main amd64 libssh-4 amd64 0.9.6-2build1 [184 kB]
Get:17 http://archive.ubuntu.com/ubuntu jammy/main amd64 libcurl3-gnutls amd64 7.81.0-1ubuntu1.7 [283 kB]
Get:18 http://archive.ubuntu.com/ubuntu jammy/main amd64 liberror-perl all 0.17029-1 [26.5 kB]
Get:19 http://archive.ubuntu.com/ubuntu jammy/main amd64 git-man all 1:2.34.1-1ubuntu1.6 [953 kB]
Get:20 http://archive.ubuntu.com/ubuntu jammy/main amd64 git amd64 1:2.34.1-1ubuntu1.6 [3142 kB]
Get:21 http://archive.ubuntu.com/ubuntu jammy/main amd64 libsasl2-modules amd64 2.1.27+dfsg2-3ubuntu1.1 [57.2 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 7951 kB in 0s (124 MB/s)
Selecting previously unselected package openssl.
(Reading database ... 10123 files and directories currently installed.)
Preparing to unpack .../00-openssl_3.0.2-0ubuntu1.7_amd64.deb ...
Unpacking openssl (3.0.2-0ubuntu1.7) ...
Selecting previously unselected package ca-certificates.
Preparing to unpack .../01-ca-certificates_20211016ubuntu0.22.04.1_all.deb ...
Unpacking ca-certificates (20211016ubuntu0.22.04.1) ...
Selecting previously unselected package libmd0:amd64.
Preparing to unpack .../02-libmd0_1.0.4-1build1_amd64.deb ...
Unpacking libmd0:amd64 (1.0.4-1build1) ...
Selecting previously unselected package libbsd0:amd64.
Preparing to unpack .../03-libbsd0_0.11.5-1_amd64.deb ...
Unpacking libbsd0:amd64 (0.11.5-1) ...
Selecting previously unselected package libexpat1:amd64.
Preparing to unpack .../04-libexpat1_2.4.7-1ubuntu0.2_amd64.deb ...
Unpacking libexpat1:amd64 (2.4.7-1ubuntu0.2) ...
Selecting previously unselected package libcbor0.8:amd64.
Preparing to unpack .../05-libcbor0.8_0.8.0-2ubuntu1_amd64.deb ...
Unpacking libcbor0.8:amd64 (0.8.0-2ubuntu1) ...
Selecting previously unselected package libedit2:amd64.
Preparing to unpack .../06-libedit2_3.1-20210910-1build1_amd64.deb ...
Unpacking libedit2:amd64 (3.1-20210910-1build1) ...
Selecting previously unselected package libfido2-1:amd64.
Preparing to unpack .../07-libfido2-1_1.10.0-1_amd64.deb ...
Unpacking libfido2-1:amd64 (1.10.0-1) ...
Selecting previously unselected package libnghttp2-14:amd64.
Preparing to unpack .../08-libnghttp2-14_1.43.0-1build3_amd64.deb ...
Unpacking libnghttp2-14:amd64 (1.43.0-1build3) ...
Selecting previously unselected package openssh-client.
Preparing to unpack .../09-openssh-client_1%3a8.9p1-3ubuntu0.1_amd64.deb ...
Unpacking openssh-client (1:8.9p1-3ubuntu0.1) ...
Selecting previously unselected package libbrotli1:amd64.
Preparing to unpack .../10-libbrotli1_1.0.9-2build6_amd64.deb ...
Unpacking libbrotli1:amd64 (1.0.9-2build6) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../11-libsasl2-modules-db_2.1.27+dfsg2-3ubuntu1.1_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../12-libsasl2-2_2.1.27+dfsg2-3ubuntu1.1_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Selecting previously unselected package libldap-2.5-0:amd64.
Preparing to unpack .../13-libldap-2.5-0_2.5.13+dfsg-0ubuntu0.22.04.1_amd64.deb ...
Unpacking libldap-2.5-0:amd64 (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Selecting previously unselected package librtmp1:amd64.
Preparing to unpack .../14-librtmp1_2.4+20151223.gitfa8646d.1-2build4_amd64.deb ...
Unpacking librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2build4) ...
Selecting previously unselected package libssh-4:amd64.
Preparing to unpack .../15-libssh-4_0.9.6-2build1_amd64.deb ...
Unpacking libssh-4:amd64 (0.9.6-2build1) ...
Selecting previously unselected package libcurl3-gnutls:amd64.
Preparing to unpack .../16-libcurl3-gnutls_7.81.0-1ubuntu1.7_amd64.deb ...
Unpacking libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.7) ...
Selecting previously unselected package liberror-perl.
Preparing to unpack .../17-liberror-perl_0.17029-1_all.deb ...
Unpacking liberror-perl (0.17029-1) ...
Selecting previously unselected package git-man.
Preparing to unpack .../18-git-man_1%3a2.34.1-1ubuntu1.6_all.deb ...
Unpacking git-man (1:2.34.1-1ubuntu1.6) ...
Selecting previously unselected package git.
Preparing to unpack .../19-git_1%3a2.34.1-1ubuntu1.6_amd64.deb ...
Unpacking git (1:2.34.1-1ubuntu1.6) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../20-libsasl2-modules_2.1.27+dfsg2-3ubuntu1.1_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Setting up libexpat1:amd64 (2.4.7-1ubuntu0.2) ...
Setting up libcbor0.8:amd64 (0.8.0-2ubuntu1) ...
Setting up libbrotli1:amd64 (1.0.9-2build6) ...
Setting up libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Setting up libnghttp2-14:amd64 (1.43.0-1build3) ...
Setting up libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Setting up liberror-perl (0.17029-1) ...
Setting up librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2build4) ...
Setting up libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.1) ...
Setting up libssh-4:amd64 (0.9.6-2build1) ...
Setting up libmd0:amd64 (1.0.4-1build1) ...
Setting up git-man (1:2.34.1-1ubuntu1.6) ...
Setting up libfido2-1:amd64 (1.10.0-1) ...
Setting up openssl (3.0.2-0ubuntu1.7) ...
Setting up libbsd0:amd64 (0.11.5-1) ...
Setting up libedit2:amd64 (3.1-20210910-1build1) ...
Setting up libldap-2.5-0:amd64 (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Setting up ca-certificates (20211016ubuntu0.22.04.1) ...
debconf: unable to initialize frontend: Dialog
debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 78.)
debconf: falling back to frontend: Readline
Updating certificates in /etc/ssl/certs...
124 added, 0 removed; done.
Setting up openssh-client (1:8.9p1-3ubuntu0.1) ...
update-alternatives: using /usr/bin/ssh to provide /usr/bin/rsh (rsh) in auto mode
update-alternatives: using /usr/bin/slogin to provide /usr/bin/rlogin (rlogin) in auto mode
update-alternatives: using /usr/bin/scp to provide /usr/bin/rcp (rcp) in auto mode
Setting up libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.7) ...
Setting up git (1:2.34.1-1ubuntu1.6) ...
Processing triggers for libc-bin (2.35-0ubuntu3.1) ...
Processing triggers for ca-certificates (20211016ubuntu0.22.04.1) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
STEP 3/3: RUN --mount=type=ssh GIT_SSH_COMMAND="ssh -vvv -o StrictHostKeyChecking=no" git clone ssh://<MYGITSERVER>
Cloning into 'p3000plus.tools.src'...
OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/root/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/root/.ssh/known_hosts2'
debug2: resolving "<MYGITSERVER>" port 7999
debug3: resolve_host: lookup <MYGITSERVER>:7999
debug3: ssh_connect_direct: entering
debug1: Connecting to <MYGITSERVER> [192.168.200.49] port 7999.
debug3: set_sock_tos: set socket 3 IP_TOS 0x10
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.1
debug1: Remote protocol version 2.0, remote software version APACHE-SSHD-2.8.0
debug1: compat_banner: no match: APACHE-SSHD-2.8.0
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to <MYGITSERVER>:7999 as 'git'
debug3: put_host_port: [<MYGITSERVER>]:7999
debug1: load_hostkeys: fopen /root/.ssh/known_hosts: No such file or directory
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug3: order_hostkeyalgs: no algorithms matched; accept original
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,sntrup761x25519-sha512@openssh.com,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c
debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group17-sha512,diffie-hellman-group16-sha512,diffie-hellman-group15-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,ext-info-s
debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none
debug2: compression stoc: none
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: rsa-sha2-512
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ssh-rsa SHA256:pSsJIKeNw1/SLW3XISgdPj2IVn3ziXBscC4DH0zyThg
debug3: put_host_port: [192.168.200.49]:7999
debug3: put_host_port: [<MYGITSERVER>]:7999
debug1: load_hostkeys: fopen /root/.ssh/known_hosts: No such file or directory
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: checking without port identifier
debug1: load_hostkeys: fopen /root/.ssh/known_hosts: No such file or directory
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: SELinux support disabled
Warning: Permanently added '[MYGITSERVER]:7999' (RSA) to the list of known hosts.
debug1: check_host_key: hostkey not known or explicitly trusted: disabling UpdateHostkeys
debug3: send packet: type 21
debug2: ssh_set_newkeys: mode 1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: ssh_set_newkeys: mode 0
debug1: rekey in after 134217728 blocks
debug2: get_agent_identities: ssh_agent_bind_hostkey: agent refused operation
debug1: get_agent_identities: agent returned 1 keys
debug1: Will attempt key: jenkins@jmaster RSA SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro agent
debug1: Will attempt key: /root/.ssh/id_rsa 
debug1: Will attempt key: /root/.ssh/id_ecdsa 
debug1: Will attempt key: /root/.ssh/id_ecdsa_sk 
debug1: Will attempt key: /root/.ssh/id_ed25519 
debug1: Will attempt key: /root/.ssh/id_ed25519_sk 
debug1: Will attempt key: /root/.ssh/id_xmss 
debug1: Will attempt key: /root/.ssh/id_dsa 
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ecdsa-sha2-nistp256@openssh.com,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-rsa-cert-v01@openssh.com,ssh-dss,ssh-dss-cert-v01@openssh.com>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: jenkins@jmaster RSA SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro agent
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 60
debug1: Server accepts key: jenkins@jmaster RSA SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro agent
debug3: sign_and_send_pubkey: using publickey with RSA SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro
debug3: sign_and_send_pubkey: signing using rsa-sha2-512 SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro
agent key RSA SHA256:hlPoveJRo5qIGoljGVD5/Gh5z/hcC8NA+2G2tmF7Qro returned incorrect signature type
sign_and_send_pubkey: no mutual signature supported
debug1: Trying private key: /root/.ssh/id_rsa
debug3: no such identity: /root/.ssh/id_rsa: No such file or directory
debug1: Trying private key: /root/.ssh/id_ecdsa
debug3: no such identity: /root/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /root/.ssh/id_ecdsa_sk
debug3: no such identity: /root/.ssh/id_ecdsa_sk: No such file or directory
debug1: Trying private key: /root/.ssh/id_ed25519
debug3: no such identity: /root/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: /root/.ssh/id_ed25519_sk
debug3: no such identity: /root/.ssh/id_ed25519_sk: No such file or directory
debug1: Trying private key: /root/.ssh/id_xmss
debug3: no such identity: /root/.ssh/id_xmss: No such file or directory
debug1: Trying private key: /root/.ssh/id_dsa
debug3: no such identity: /root/.ssh/id_dsa: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
git@MYGITSERVER: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
error building at STEP "RUN --mount=type=ssh GIT_SSH_COMMAND="ssh -vvv -o StrictHostKeyChecking=no" git clone ssh://<MYGITSERVER>": error while running runtime: exit status 128
flouthoc commented 1 year ago

@Andre-85 Could you please try this patch https://github.com/containers/buildah/pull/4637 , although I am not manually getting the flags and passing it to extended client but afaics buildkit does the same.

Andre-85 commented 1 year ago

@flouthoc Very cool, your patch works! Yesterday night I teached myself go and got in morning also a patch ready, which also modifies the AgentServer struct. So I assume this will work also with --ssh=id options (so in cases where is not only a passthru of the systems ssh-agent), but I haven't it tested yet. Today I will setup a test also for this and i will create a Containerfile with can be used by everyone for running the test.

Thanks again, André

PS: Sorry, I'm also not very common to github. For submitting a patch should I create an own branch?

Patch:

diff --git a/pkg/sshagent/sshagent.go b/pkg/sshagent/sshagent.go
index fd835be3..b14d8da2 100644
--- a/pkg/sshagent/sshagent.go
+++ b/pkg/sshagent/sshagent.go
@@ -19,7 +19,7 @@ import (

 // AgentServer is an ssh agent that can be served and shutdown at a later time
 type AgentServer struct {
-       agent     agent.Agent
+       agent     agent.ExtendedAgent
        wg        sync.WaitGroup
        conn      *net.Conn
        listener  net.Listener
@@ -31,14 +31,18 @@ type AgentServer struct {
 // NewAgentServer creates a new agent on the host
 func NewAgentServer(source *Source) (*AgentServer, error) {
        if source.Keys != nil {
-               return newAgentServerKeyring(source.Keys)
+               return newAgentServerKeyring(source.Socket, source.Keys)
        }
        return newAgentServerSocket(source.Socket)
 }

 // newAgentServerKeyring creates a new agent from scratch and adds keys
-func newAgentServerKeyring(keys []interface{}) (*AgentServer, error) {
-       a := agent.NewKeyring()
+func newAgentServerKeyring(socketPath string, keys []interface{}) (*AgentServer, error) {
+       conn, err := net.Dial("unix", socketPath)
+    if err != nil {
+        return nil, err
+    }
+       a := agent.NewClient(conn)
        for _, k := range keys {
                if err := a.Add(agent.AddedKey{PrivateKey: k}); err != nil {
                        return nil, fmt.Errorf("failed to create ssh agent: %w", err)
@@ -46,6 +50,7 @@ func newAgentServerKeyring(keys []interface{}) (*AgentServer, error) {
        }
        return &AgentServer{
                agent:    a,
+               conn:     &conn,
                shutdown: make(chan bool, 1),
        }, nil
 }
@@ -164,7 +169,7 @@ func (a *AgentServer) ServePath() string {
 // readOnlyAgent implemetnts the agent.Agent interface
 // readOnlyAgent allows reads only to prevent keys from being added from the build to the forwarded ssh agent on the host
 type readOnlyAgent struct {
-       agent.Agent
+       agent.ExtendedAgent
 }

 func (a *readOnlyAgent) Add(_ agent.AddedKey) error {
flouthoc commented 1 year ago

You will need to create a PR on github.com/containers/buildah, I guess then you can create additional PR in buildah once this gets merged https://github.com/containers/buildah/pull/4637 or if you include my patch in the PR then I will close my PR.

Andre-85 commented 1 year ago

I thinks it's better to get #4637 merged, since it exactly resolves the problem I described and my test is for. The second part which my patch covers, i will do in an extra PR with an extra test. Meanwhile I improved the test setup. As a Containerfile I use now:

FROM ubuntu:22.04

RUN apt update && apt-get -y install git
RUN --mount=type=ssh GIT_SSH_COMMAND="ssh -vvv -o StrictHostKeyChecking=no" git clone git@github.com:containers/buildah.git

So you will only need a github account with an ssh-key for testing and nothing else. After applying your patch see in ssh log output sign_and_send_pubkey: signing using rsa-sha2-512, means the signature extension was honored and it works. Running buildah build --ssh=default -f Containerfile gives now following output:

STEP 1/3: FROM ubuntu:22.04
STEP 2/3: RUN apt update && apt-get -y install git

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Get:1 http://security.ubuntu.com/ubuntu jammy-security InRelease [110 kB]
Get:2 http://archive.ubuntu.com/ubuntu jammy InRelease [270 kB]
Get:3 http://archive.ubuntu.com/ubuntu jammy-updates InRelease [119 kB]
Get:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease [107 kB]
Get:5 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages [1792 kB]
Get:6 http://security.ubuntu.com/ubuntu jammy-security/multiverse amd64 Packages [5557 B]
Get:7 http://security.ubuntu.com/ubuntu jammy-security/universe amd64 Packages [880 kB]
Get:8 http://archive.ubuntu.com/ubuntu jammy/multiverse amd64 Packages [266 kB]
Get:9 http://archive.ubuntu.com/ubuntu jammy/universe amd64 Packages [17.5 MB]
Get:10 http://security.ubuntu.com/ubuntu jammy-security/main amd64 Packages [811 kB]
Get:11 http://security.ubuntu.com/ubuntu jammy-security/restricted amd64 Packages [752 kB]
Get:12 http://archive.ubuntu.com/ubuntu jammy/restricted amd64 Packages [164 kB]
Get:13 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 Packages [1186 kB]
Get:14 http://archive.ubuntu.com/ubuntu jammy-updates/restricted amd64 Packages [880 kB]
Get:15 http://archive.ubuntu.com/ubuntu jammy-updates/universe amd64 Packages [1119 kB]
Get:16 http://archive.ubuntu.com/ubuntu jammy-updates/multiverse amd64 Packages [10.9 kB]
Get:17 http://archive.ubuntu.com/ubuntu jammy-backports/main amd64 Packages [49.0 kB]
Get:18 http://archive.ubuntu.com/ubuntu jammy-backports/universe amd64 Packages [22.4 kB]
Fetched 26.0 MB in 5s (5587 kB/s)
Reading package lists...
Building dependency tree...
Reading state information...
All packages are up to date.
Reading package lists...
Building dependency tree...
Reading state information...
The following additional packages will be installed:
  ca-certificates git-man less libbrotli1 libbsd0 libcbor0.8 libcurl3-gnutls
  libedit2 liberror-perl libexpat1 libfido2-1 libgdbm-compat4 libgdbm6
  libldap-2.5-0 libldap-common libmd0 libnghttp2-14 libperl5.34 libpsl5
  librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db libssh-4 libx11-6
  libx11-data libxau6 libxcb1 libxdmcp6 libxext6 libxmuu1 netbase
  openssh-client openssl patch perl perl-modules-5.34 publicsuffix xauth
Suggested packages:
  gettext-base git-daemon-run | git-daemon-sysvinit git-doc git-email git-gui
  gitk gitweb git-cvs git-mediawiki git-svn gdbm-l10n
  libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal
  libsasl2-modules-ldap libsasl2-modules-otp libsasl2-modules-sql keychain
  libpam-ssh monkeysphere ssh-askpass ed diffutils-doc perl-doc
  libterm-readline-gnu-perl | libterm-readline-perl-perl make
  libtap-harness-archive-perl
The following NEW packages will be installed:
  ca-certificates git git-man less libbrotli1 libbsd0 libcbor0.8
  libcurl3-gnutls libedit2 liberror-perl libexpat1 libfido2-1 libgdbm-compat4
  libgdbm6 libldap-2.5-0 libldap-common libmd0 libnghttp2-14 libperl5.34
  libpsl5 librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db libssh-4
  libx11-6 libx11-data libxau6 libxcb1 libxdmcp6 libxext6 libxmuu1 netbase
  openssh-client openssl patch perl perl-modules-5.34 publicsuffix xauth
0 upgraded, 40 newly installed, 0 to remove and 0 not upgraded.
Need to get 17.4 MB of archives.
After this operation, 84.0 MB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 perl-modules-5.34 all 5.34.0-3ubuntu1.1 [2976 kB]
Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 libgdbm6 amd64 1.23-1 [33.9 kB]
Get:3 http://archive.ubuntu.com/ubuntu jammy/main amd64 libgdbm-compat4 amd64 1.23-1 [6606 B]
Get:4 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libperl5.34 amd64 5.34.0-3ubuntu1.1 [4819 kB]
Get:5 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 perl amd64 5.34.0-3ubuntu1.1 [232 kB]
Get:6 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 openssl amd64 3.0.2-0ubuntu1.8 [1184 kB]
Get:7 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 ca-certificates all 20211016ubuntu0.22.04.1 [144 kB]
Get:8 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 less amd64 590-1ubuntu0.22.04.1 [143 kB]
Get:9 http://archive.ubuntu.com/ubuntu jammy/main amd64 libmd0 amd64 1.0.4-1build1 [23.0 kB]
Get:10 http://archive.ubuntu.com/ubuntu jammy/main amd64 libbsd0 amd64 0.11.5-1 [44.8 kB]
Get:11 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libexpat1 amd64 2.4.7-1ubuntu0.2 [91.0 kB]
Get:12 http://archive.ubuntu.com/ubuntu jammy/main amd64 netbase all 6.3 [12.9 kB]
Get:13 http://archive.ubuntu.com/ubuntu jammy/main amd64 libcbor0.8 amd64 0.8.0-2ubuntu1 [24.6 kB]
Get:14 http://archive.ubuntu.com/ubuntu jammy/main amd64 libedit2 amd64 3.1-20210910-1build1 [96.8 kB]
Get:15 http://archive.ubuntu.com/ubuntu jammy/main amd64 libfido2-1 amd64 1.10.0-1 [82.8 kB]
Get:16 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnghttp2-14 amd64 1.43.0-1build3 [76.3 kB]
Get:17 http://archive.ubuntu.com/ubuntu jammy/main amd64 libpsl5 amd64 0.21.0-1.2build2 [58.4 kB]
Get:18 http://archive.ubuntu.com/ubuntu jammy/main amd64 libxau6 amd64 1:1.0.9-1build5 [7634 B]
Get:19 http://archive.ubuntu.com/ubuntu jammy/main amd64 libxdmcp6 amd64 1:1.1.3-0ubuntu5 [10.9 kB]
Get:20 http://archive.ubuntu.com/ubuntu jammy/main amd64 libxcb1 amd64 1.14-3ubuntu3 [49.0 kB]
Get:21 http://archive.ubuntu.com/ubuntu jammy/main amd64 libx11-data all 2:1.7.5-1 [119 kB]
Get:22 http://archive.ubuntu.com/ubuntu jammy/main amd64 libx11-6 amd64 2:1.7.5-1 [666 kB]
Get:23 http://archive.ubuntu.com/ubuntu jammy/main amd64 libxext6 amd64 2:1.3.4-1build1 [31.8 kB]
Get:24 http://archive.ubuntu.com/ubuntu jammy/main amd64 libxmuu1 amd64 2:1.1.3-3 [10.2 kB]
Get:25 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 openssh-client amd64 1:8.9p1-3ubuntu0.1 [908 kB]
Get:26 http://archive.ubuntu.com/ubuntu jammy/main amd64 publicsuffix all 20211207.1025-1 [129 kB]
Get:27 http://archive.ubuntu.com/ubuntu jammy/main amd64 xauth amd64 1:1.1-1build2 [27.5 kB]
Get:28 http://archive.ubuntu.com/ubuntu jammy/main amd64 libbrotli1 amd64 1.0.9-2build6 [315 kB]
Get:29 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-modules-db amd64 2.1.27+dfsg2-3ubuntu1.2 [20.5 kB]
Get:30 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-2 amd64 2.1.27+dfsg2-3ubuntu1.2 [53.8 kB]
Get:31 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libldap-2.5-0 amd64 2.5.13+dfsg-0ubuntu0.22.04.1 [183 kB]
Get:32 http://archive.ubuntu.com/ubuntu jammy/main amd64 librtmp1 amd64 2.4+20151223.gitfa8646d.1-2build4 [58.2 kB]
Get:33 http://archive.ubuntu.com/ubuntu jammy/main amd64 libssh-4 amd64 0.9.6-2build1 [184 kB]
Get:34 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libcurl3-gnutls amd64 7.81.0-1ubuntu1.8 [284 kB]
Get:35 http://archive.ubuntu.com/ubuntu jammy/main amd64 liberror-perl all 0.17029-1 [26.5 kB]
Get:36 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 git-man all 1:2.34.1-1ubuntu1.8 [953 kB]
Get:37 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 git amd64 1:2.34.1-1ubuntu1.8 [3141 kB]
Get:38 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libldap-common all 2.5.13+dfsg-0ubuntu0.22.04.1 [15.9 kB]
Get:39 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-modules amd64 2.1.27+dfsg2-3ubuntu1.2 [68.8 kB]
Get:40 http://archive.ubuntu.com/ubuntu jammy/main amd64 patch amd64 2.7.6-7build2 [109 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 17.4 MB in 5s (3228 kB/s)
Selecting previously unselected package perl-modules-5.34.
(Reading database ... 4395 files and directories currently installed.)
Preparing to unpack .../00-perl-modules-5.34_5.34.0-3ubuntu1.1_all.deb ...
Unpacking perl-modules-5.34 (5.34.0-3ubuntu1.1) ...
Selecting previously unselected package libgdbm6:amd64.
Preparing to unpack .../01-libgdbm6_1.23-1_amd64.deb ...
Unpacking libgdbm6:amd64 (1.23-1) ...
Selecting previously unselected package libgdbm-compat4:amd64.
Preparing to unpack .../02-libgdbm-compat4_1.23-1_amd64.deb ...
Unpacking libgdbm-compat4:amd64 (1.23-1) ...
Selecting previously unselected package libperl5.34:amd64.
Preparing to unpack .../03-libperl5.34_5.34.0-3ubuntu1.1_amd64.deb ...
Unpacking libperl5.34:amd64 (5.34.0-3ubuntu1.1) ...
Selecting previously unselected package perl.
Preparing to unpack .../04-perl_5.34.0-3ubuntu1.1_amd64.deb ...
Unpacking perl (5.34.0-3ubuntu1.1) ...
Selecting previously unselected package openssl.
Preparing to unpack .../05-openssl_3.0.2-0ubuntu1.8_amd64.deb ...
Unpacking openssl (3.0.2-0ubuntu1.8) ...
Selecting previously unselected package ca-certificates.
Preparing to unpack .../06-ca-certificates_20211016ubuntu0.22.04.1_all.deb ...
Unpacking ca-certificates (20211016ubuntu0.22.04.1) ...
Selecting previously unselected package less.
Preparing to unpack .../07-less_590-1ubuntu0.22.04.1_amd64.deb ...
Unpacking less (590-1ubuntu0.22.04.1) ...
Selecting previously unselected package libmd0:amd64.
Preparing to unpack .../08-libmd0_1.0.4-1build1_amd64.deb ...
Unpacking libmd0:amd64 (1.0.4-1build1) ...
Selecting previously unselected package libbsd0:amd64.
Preparing to unpack .../09-libbsd0_0.11.5-1_amd64.deb ...
Unpacking libbsd0:amd64 (0.11.5-1) ...
Selecting previously unselected package libexpat1:amd64.
Preparing to unpack .../10-libexpat1_2.4.7-1ubuntu0.2_amd64.deb ...
Unpacking libexpat1:amd64 (2.4.7-1ubuntu0.2) ...
Selecting previously unselected package netbase.
Preparing to unpack .../11-netbase_6.3_all.deb ...
Unpacking netbase (6.3) ...
Selecting previously unselected package libcbor0.8:amd64.
Preparing to unpack .../12-libcbor0.8_0.8.0-2ubuntu1_amd64.deb ...
Unpacking libcbor0.8:amd64 (0.8.0-2ubuntu1) ...
Selecting previously unselected package libedit2:amd64.
Preparing to unpack .../13-libedit2_3.1-20210910-1build1_amd64.deb ...
Unpacking libedit2:amd64 (3.1-20210910-1build1) ...
Selecting previously unselected package libfido2-1:amd64.
Preparing to unpack .../14-libfido2-1_1.10.0-1_amd64.deb ...
Unpacking libfido2-1:amd64 (1.10.0-1) ...
Selecting previously unselected package libnghttp2-14:amd64.
Preparing to unpack .../15-libnghttp2-14_1.43.0-1build3_amd64.deb ...
Unpacking libnghttp2-14:amd64 (1.43.0-1build3) ...
Selecting previously unselected package libpsl5:amd64.
Preparing to unpack .../16-libpsl5_0.21.0-1.2build2_amd64.deb ...
Unpacking libpsl5:amd64 (0.21.0-1.2build2) ...
Selecting previously unselected package libxau6:amd64.
Preparing to unpack .../17-libxau6_1%3a1.0.9-1build5_amd64.deb ...
Unpacking libxau6:amd64 (1:1.0.9-1build5) ...
Selecting previously unselected package libxdmcp6:amd64.
Preparing to unpack .../18-libxdmcp6_1%3a1.1.3-0ubuntu5_amd64.deb ...
Unpacking libxdmcp6:amd64 (1:1.1.3-0ubuntu5) ...
Selecting previously unselected package libxcb1:amd64.
Preparing to unpack .../19-libxcb1_1.14-3ubuntu3_amd64.deb ...
Unpacking libxcb1:amd64 (1.14-3ubuntu3) ...
Selecting previously unselected package libx11-data.
Preparing to unpack .../20-libx11-data_2%3a1.7.5-1_all.deb ...
Unpacking libx11-data (2:1.7.5-1) ...
Selecting previously unselected package libx11-6:amd64.
Preparing to unpack .../21-libx11-6_2%3a1.7.5-1_amd64.deb ...
Unpacking libx11-6:amd64 (2:1.7.5-1) ...
Selecting previously unselected package libxext6:amd64.
Preparing to unpack .../22-libxext6_2%3a1.3.4-1build1_amd64.deb ...
Unpacking libxext6:amd64 (2:1.3.4-1build1) ...
Selecting previously unselected package libxmuu1:amd64.
Preparing to unpack .../23-libxmuu1_2%3a1.1.3-3_amd64.deb ...
Unpacking libxmuu1:amd64 (2:1.1.3-3) ...
Selecting previously unselected package openssh-client.
Preparing to unpack .../24-openssh-client_1%3a8.9p1-3ubuntu0.1_amd64.deb ...
Unpacking openssh-client (1:8.9p1-3ubuntu0.1) ...
Selecting previously unselected package publicsuffix.
Preparing to unpack .../25-publicsuffix_20211207.1025-1_all.deb ...
Unpacking publicsuffix (20211207.1025-1) ...
Selecting previously unselected package xauth.
Preparing to unpack .../26-xauth_1%3a1.1-1build2_amd64.deb ...
Unpacking xauth (1:1.1-1build2) ...
Selecting previously unselected package libbrotli1:amd64.
Preparing to unpack .../27-libbrotli1_1.0.9-2build6_amd64.deb ...
Unpacking libbrotli1:amd64 (1.0.9-2build6) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../28-libsasl2-modules-db_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../29-libsasl2-2_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package libldap-2.5-0:amd64.
Preparing to unpack .../30-libldap-2.5-0_2.5.13+dfsg-0ubuntu0.22.04.1_amd64.deb ...
Unpacking libldap-2.5-0:amd64 (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Selecting previously unselected package librtmp1:amd64.
Preparing to unpack .../31-librtmp1_2.4+20151223.gitfa8646d.1-2build4_amd64.deb ...
Unpacking librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2build4) ...
Selecting previously unselected package libssh-4:amd64.
Preparing to unpack .../32-libssh-4_0.9.6-2build1_amd64.deb ...
Unpacking libssh-4:amd64 (0.9.6-2build1) ...
Selecting previously unselected package libcurl3-gnutls:amd64.
Preparing to unpack .../33-libcurl3-gnutls_7.81.0-1ubuntu1.8_amd64.deb ...
Unpacking libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.8) ...
Selecting previously unselected package liberror-perl.
Preparing to unpack .../34-liberror-perl_0.17029-1_all.deb ...
Unpacking liberror-perl (0.17029-1) ...
Selecting previously unselected package git-man.
Preparing to unpack .../35-git-man_1%3a2.34.1-1ubuntu1.8_all.deb ...
Unpacking git-man (1:2.34.1-1ubuntu1.8) ...
Selecting previously unselected package git.
Preparing to unpack .../36-git_1%3a2.34.1-1ubuntu1.8_amd64.deb ...
Unpacking git (1:2.34.1-1ubuntu1.8) ...
Selecting previously unselected package libldap-common.
Preparing to unpack .../37-libldap-common_2.5.13+dfsg-0ubuntu0.22.04.1_all.deb ...
Unpacking libldap-common (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../38-libsasl2-modules_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package patch.
Preparing to unpack .../39-patch_2.7.6-7build2_amd64.deb ...
Unpacking patch (2.7.6-7build2) ...
Setting up libexpat1:amd64 (2.4.7-1ubuntu0.2) ...
Setting up libxau6:amd64 (1:1.0.9-1build5) ...
Setting up libpsl5:amd64 (0.21.0-1.2build2) ...
Setting up libcbor0.8:amd64 (0.8.0-2ubuntu1) ...
Setting up libbrotli1:amd64 (1.0.9-2build6) ...
Setting up libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libnghttp2-14:amd64 (1.43.0-1build3) ...
Setting up less (590-1ubuntu0.22.04.1) ...
Setting up perl-modules-5.34 (5.34.0-3ubuntu1.1) ...
Setting up libldap-common (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Setting up libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libx11-data (2:1.7.5-1) ...
Setting up librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2build4) ...
Setting up patch (2.7.6-7build2) ...
Setting up libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libssh-4:amd64 (0.9.6-2build1) ...
Setting up libmd0:amd64 (1.0.4-1build1) ...
Setting up git-man (1:2.34.1-1ubuntu1.8) ...
Setting up netbase (6.3) ...
Setting up libfido2-1:amd64 (1.10.0-1) ...
Setting up openssl (3.0.2-0ubuntu1.8) ...
Setting up libbsd0:amd64 (0.11.5-1) ...
Setting up publicsuffix (20211207.1025-1) ...
Setting up libgdbm6:amd64 (1.23-1) ...
Setting up libxdmcp6:amd64 (1:1.1.3-0ubuntu5) ...
Setting up libxcb1:amd64 (1.14-3ubuntu3) ...
Setting up libedit2:amd64 (3.1-20210910-1build1) ...
Setting up libldap-2.5-0:amd64 (2.5.13+dfsg-0ubuntu0.22.04.1) ...
Setting up ca-certificates (20211016ubuntu0.22.04.1) ...
debconf: unable to initialize frontend: Dialog
debconf: (TERM is not set, so the dialog frontend is not usable.)
debconf: falling back to frontend: Readline
Updating certificates in /etc/ssl/certs...
124 added, 0 removed; done.
Setting up libgdbm-compat4:amd64 (1.23-1) ...
Setting up libx11-6:amd64 (2:1.7.5-1) ...
Setting up libxmuu1:amd64 (2:1.1.3-3) ...
Setting up libperl5.34:amd64 (5.34.0-3ubuntu1.1) ...
Setting up openssh-client (1:8.9p1-3ubuntu0.1) ...
update-alternatives: using /usr/bin/ssh to provide /usr/bin/rsh (rsh) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/rsh.1.gz because associated file /usr/share/man/man1/ssh.1.gz (of link group rsh) doesn't exist
update-alternatives: using /usr/bin/slogin to provide /usr/bin/rlogin (rlogin) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/rlogin.1.gz because associated file /usr/share/man/man1/slogin.1.gz (of link group rlogin) doesn't exist
update-alternatives: using /usr/bin/scp to provide /usr/bin/rcp (rcp) in auto mode
update-alternatives: warning: skip creation of /usr/share/man/man1/rcp.1.gz because associated file /usr/share/man/man1/scp.1.gz (of link group rcp) doesn't exist
Setting up libxext6:amd64 (2:1.3.4-1build1) ...
Setting up libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.8) ...
Setting up perl (5.34.0-3ubuntu1.1) ...
Setting up xauth (1:1.1-1build2) ...
Setting up liberror-perl (0.17029-1) ...
Setting up git (1:2.34.1-1ubuntu1.8) ...
Processing triggers for libc-bin (2.35-0ubuntu3.1) ...
Processing triggers for ca-certificates (20211016ubuntu0.22.04.1) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
STEP 3/3: RUN --mount=type=ssh GIT_SSH_COMMAND="ssh -vvv -o StrictHostKeyChecking=no" git clone git@github.com:containers/buildah.git
Cloning into 'buildah'...
OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/root/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/root/.ssh/known_hosts2'
debug2: resolving "github.com" port 22
debug3: resolve_host: lookup github.com:22
debug3: ssh_connect_direct: entering
debug1: Connecting to github.com [140.82.121.4] port 22.
debug3: set_sock_tos: set socket 3 IP_TOS 0x10
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.1
debug1: Remote protocol version 2.0, remote software version babeld-b2703c17
debug1: compat_banner: no match: babeld-b2703c17
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to github.com:22 as 'git'
debug1: load_hostkeys: fopen /root/.ssh/known_hosts: No such file or directory
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug3: order_hostkeyalgs: no algorithms matched; accept original
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,sntrup761x25519-sha512@openssh.com,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c
debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256
debug2: host key algorithms: ssh-ed25519,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
debug2: MACs ctos: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
debug2: MACs stoc: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ssh-ed25519 SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU
debug1: load_hostkeys: fopen /root/.ssh/known_hosts: No such file or directory
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: SELinux support disabled
Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.
debug1: check_host_key: hostkey not known or explicitly trusted: disabling UpdateHostkeys
debug3: send packet: type 21
debug2: ssh_set_newkeys: mode 1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: ssh_set_newkeys: mode 0
debug1: rekey in after 134217728 blocks
debug2: get_agent_identities: ssh_agent_bind_hostkey: invalid format
debug1: get_agent_identities: agent returned 3 keys
debug1: Will attempt key: wagner@wagner-Latitude-5420 RSA SHA256:Htd5ORbjRZw3pWF0rQnTZ85olgbfn6SvP59lcqWmJfU agent
debug1: Will attempt key: wagner@wagner-Latitude-5420 RSA SHA256:3eS5wxbDlmhrvICWH0XtAA+YuliGR/m+E46zsllkgtY agent
debug1: Will attempt key: wagner@wagner-Precision-3510 RSA SHA256:t2zQg450Dbp81XZM8hGrh95pvpfVQLel44FcPggW+Bk agent
debug1: Will attempt key: /root/.ssh/id_rsa 
debug1: Will attempt key: /root/.ssh/id_ecdsa 
debug1: Will attempt key: /root/.ssh/id_ecdsa_sk 
debug1: Will attempt key: /root/.ssh/id_ed25519 
debug1: Will attempt key: /root/.ssh/id_ed25519_sk 
debug1: Will attempt key: /root/.ssh/id_xmss 
debug1: Will attempt key: /root/.ssh/id_dsa 
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: wagner@wagner-Latitude-5420 RSA SHA256:Htd5ORbjRZw3pWF0rQnTZ85olgbfn6SvP59lcqWmJfU agent
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 60
debug1: Server accepts key: wagner@wagner-Latitude-5420 RSA SHA256:Htd5ORbjRZw3pWF0rQnTZ85olgbfn6SvP59lcqWmJfU agent
debug3: sign_and_send_pubkey: using publickey with RSA SHA256:Htd5ORbjRZw3pWF0rQnTZ85olgbfn6SvP59lcqWmJfU
debug3: sign_and_send_pubkey: signing using rsa-sha2-512 SHA256:Htd5ORbjRZw3pWF0rQnTZ85olgbfn6SvP59lcqWmJfU
debug3: send packet: type 50
debug3: receive packet: type 52
Authenticated to github.com ([140.82.121.4]:22) using "publickey".
debug2: fd 4 setting O_NONBLOCK
debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug3: send packet: type 90
debug1: Entering interactive session.
debug1: pledge: network
debug3: receive packet: type 80
debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0
debug3: receive packet: type 91
debug2: channel_input_open_confirmation: channel 0: callback start
debug2: fd 3 setting TCP_NODELAY
debug3: set_sock_tos: set socket 3 IP_TOS 0x08
debug2: client_session2_setup: id 0
debug1: Sending environment.
debug3: Ignored env GIT_SSH_COMMAND
debug3: Ignored env GIT_EXEC_PATH
debug3: Ignored env HOSTNAME
debug3: Ignored env HOME
debug1: channel 0: setting env GIT_PROTOCOL = "version=2"
debug2: channel 0: request env confirm 0
debug3: send packet: type 98
debug3: Ignored env PATH
debug3: Ignored env SSH_AUTH_SOCK
debug3: Ignored env PWD
debug1: Sending command: git-upload-pack 'containers/buildah.git'
debug2: channel 0: request exec confirm 1
debug3: send packet: type 98
debug2: channel_input_open_confirmation: channel 0: callback done
debug2: channel 0: open confirm rwindow 32000 rmax 35000
debug3: receive packet: type 99
debug2: channel_input_status_confirm: type 99 id 0
debug2: exec request accepted on channel 0
debug2: channel 0: rcvd adjust 1248175
debug2: channel 0: read failed rfd 4 maxlen 32768: Broken pipe
debug2: channel 0: read failed
debug2: chan_shutdown_read: channel 0: (i0 o0 sock -1 wfd 4 efd 6 [write])
debug2: channel 0: input open -> drain
debug2: channel 0: ibuf empty
debug2: channel 0: send eof
debug3: send packet: type 96
debug2: channel 0: input drain -> closed
debug2: channel 0: window 1988325 sent adjust 108827
debug2: channel 0: window 1995825 sent adjust 101327
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966210 sent adjust 130942
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965954 sent adjust 131198
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1933356 sent adjust 98165
debug2: channel 0: window 1933145 sent adjust 164007
debug2: channel 0: window 1966242 sent adjust 65375
debug2: channel 0: window 1867789 sent adjust 229363
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998840 sent adjust 32777
debug2: channel 0: window 1933324 sent adjust 163828
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1900515 sent adjust 196637
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965954 sent adjust 131198
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1965890 sent adjust 131262
debug2: channel 0: window 1966274 sent adjust 130878
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1965954 sent adjust 131198
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998635 sent adjust 98517
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998635 sent adjust 98517
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998635 sent adjust 98517
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1998635 sent adjust 98517
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965730 sent adjust 131422
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965730 sent adjust 131422
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998443 sent adjust 98709
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998443 sent adjust 98709
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998443 sent adjust 98709
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966370 sent adjust 130782
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966018 sent adjust 131134
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966050 sent adjust 131102
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1966159 sent adjust 130993
debug2: channel 0: window 1998763 sent adjust 98389
debug2: channel 0: window 1966178 sent adjust 130974
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998635 sent adjust 98517
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1998776 sent adjust 98376
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966210 sent adjust 130942
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1965890 sent adjust 131262
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1966159 sent adjust 130993
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1933100 sent adjust 164052
debug2: channel 0: window 1966082 sent adjust 65311
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998635 sent adjust 65759
debug2: channel 0: window 1933548 sent adjust 98069
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 65535
debug2: channel 0: window 1933324 sent adjust 98293
debug2: channel 0: window 1933305 sent adjust 163847
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998808 sent adjust 98344
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966101 sent adjust 131051
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966165 sent adjust 130987
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966133 sent adjust 131019
debug2: channel 0: window 1998808 sent adjust 98344
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1965986 sent adjust 131166
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966133 sent adjust 131019
debug2: channel 0: window 1966095 sent adjust 131057
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1998744 sent adjust 98408
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1998667 sent adjust 98485
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966242 sent adjust 130910
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1998808 sent adjust 98344
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998763 sent adjust 98389
debug2: channel 0: window 1966133 sent adjust 131019
debug2: channel 0: window 1966095 sent adjust 131057
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998667 sent adjust 98485
debug2: channel 0: window 1966274 sent adjust 130878
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1998808 sent adjust 98344
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1933324 sent adjust 163828
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998795 sent adjust 98357
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998667 sent adjust 98485
debug2: channel 0: window 1966274 sent adjust 130878
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998763 sent adjust 98389
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1998808 sent adjust 98344
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998763 sent adjust 98389
debug2: channel 0: window 1966114 sent adjust 131038
debug2: channel 0: window 1966146 sent adjust 131006
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1966082 sent adjust 131070
debug2: channel 0: window 1998827 sent adjust 98325
debug2: channel 0: window 1998840 sent adjust 98312
debug2: channel 0: window 1998763 sent adjust 98389
debug2: channel 0: window 1966210 sent adjust 130942
debug2: channel 0: window 1998840 sent adjust 98312
debug3: receive packet: type 98
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug3: receive packet: type 96
debug2: channel 0: rcvd eof
debug2: channel 0: output open -> drain
debug3: receive packet: type 97
debug2: channel 0: rcvd close
debug3: channel 0: will not send data after close
debug3: channel 0: will not send data after close
debug2: channel 0: obuf empty
debug2: chan_shutdown_write: channel 0: (i3 o1 sock -1 wfd 5 efd 6 [write])
debug2: channel 0: output drain -> closed
debug2: channel 0: almost dead
debug2: channel 0: gc: notify user
debug2: channel 0: gc: user detached
debug2: channel 0: send close
debug3: send packet: type 97
debug2: channel 0: is dead
debug2: channel 0: garbage collecting
debug1: channel 0: free: client-session, nchannels 1
debug3: channel 0: status: The following connections are open:
  #0 client-session (t4 r43 i3/0 o3/0 e[write]/0 fd -1/-1/6 sock -1 cc -1 io 0x00/0x00)

debug3: send packet: type 1
Transferred: sent 20644, received 55826320 bytes, in 9.7 seconds
Bytes per second: sent 2132.1, received 5765590.5
debug1: Exit status 0
COMMIT
Getting image source signatures
Copying blob 202fe64c3ce3 skipped: already exists  
Copying blob e7bb197dca58 done  
Copying config e427f36b66 done  
Writing manifest to image destination
Storing signatures
--> e427f36b66c
e427f36b66cfddb96db941ef4d755b958ce72878b118eda73364265d7a022285