My analysis in <https://bugzilla.redhat.com/show_bug.cgi?id=1854275#c33> was partially wrong; I had missed that for the xen+ssh transport, the client-side libvirt library launches a naked "ssh" utility, underneath "Libvirt.Connect.connect_auth": setup [input/input_xen_ssh.ml] Libvirt.Connect.connect_auth no effect of "-ip" Nbdkit_ssh.create_ssh [input/nbdkit_ssh.ml] starts nbdkit with the ssh plugin honoring "-ip" Which requires a password just the same, and ignores "-ip" just the same. Recommend the ssh agent in the docs. Fixes: 46298c6514710013c59828b4933f0b3b1a354566 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1854275 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2062360 Signed-off-by: Laszlo Ersek <lersek@redhat.com> --- docs/virt-v2v-input-xen.pod | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/virt-v2v-input-xen.pod b/docs/virt-v2v-input-xen.pod index 8080ebea7723..afc4a019f13d 100644 --- a/docs/virt-v2v-input-xen.pod +++ b/docs/virt-v2v-input-xen.pod @@ -32,6 +32,11 @@ server to the Xen host. For example: $ ssh root@xen.example.com [ logs straight into the shell, no password is requested ] +Note that support for non-interactive authentication via the I<-ip> +option is incomplete. Some operations remain that still require the +user to enter the password manually. Therefore ssh-agent is recommended +over the I<-ip> option. See L<https://bugzilla.redhat.com/1854275>. + With some modern ssh implementations, legacy crypto policies required to interoperate with RHEL 5 sshd are disabled. To enable them you may need to run this command on the conversion server (ie. ssh client), -- 2.19.1.3.g30247aa5d201