Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mounting CIFS hostfolder fails with Cipher too short #3491

Open
dragos-cojocari opened this issue Oct 27, 2020 · 3 comments
Open

Mounting CIFS hostfolder fails with Cipher too short #3491

dragos-cojocari opened this issue Oct 27, 2020 · 3 comments

Comments

@dragos-cojocari
Copy link

General information

  • Minishift version: v1.34.2+83ebaab
  • OS: macOS Catalina (10.15.7)
  • Hypervisor: hyperkit

Steps to reproduce

  1. Create a SMB file share on the MacOs
  2. Add the host folder to Minishift minishift hostfolder add share -t cifs --source //192.168.1.20/share --target /mnt/sda1/share --options username=USERNAME,password=PASSWORD
  3. Mount the hostfolder minishift hostfolder mount share

Expected

The folder is mounted

Actual

$ minishift hostfolder mount share
   Mounting 'share': '//192.168.1.20/share' as '/mnt/sda1/share' ... Ciphertext too short

Note:

  • the username contains a "." in it
  • the password has special characters in it
  • mounting the folder from a minishift ssh session works fine
minishift ssh
sudo mount -t cifs //192.168.1.20/share /var/lib/minishift/base/openshift.local.pv/pvtrain -o username=USERNAME,password=PASSWORD

Logs

$minishift hostfolder mount share --show-libmachine-logs -v5
-- minishift version: v1.34.2+83ebaab
Found binary path at /usr/local/bin/docker-machine-driver-hyperkit
Launching plugin server for driver hyperkit
Plugin server listening at address 127.0.0.1:57052
() Calling .GetVersion
Using API Version  1
() Calling .SetConfigRaw
() Calling .GetMachineName
(minishift) Calling .GetState
(minishift) Calling .GetState
(minishift) Calling .GetSSHHostname
(minishift) Calling .GetSSHPort
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHUsername
Using SSH client type: external
Using SSH private key: /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa (-rw-------)
&{[-F /dev/null -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=no -o ControlPath=none -o LogLevel=quiet -o PasswordAuthentication=no -o ServerAliveInterval=60 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker@192.168.64.21 -o IdentitiesOnly=yes -i /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa -p 22] /usr/bin/ssh <nil>}
About to run SSH command:
sudo mkdir -p /mnt/sda1/share
SSH cmd err, output: <nil>: 
(minishift) Calling .GetSSHHostname
(minishift) Calling .GetSSHPort
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHUsername
Using SSH client type: external
Using SSH private key: /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa (-rw-------)
&{[-F /dev/null -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=no -o ControlPath=none -o LogLevel=quiet -o PasswordAuthentication=no -o ServerAliveInterval=60 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker@192.168.64.21 -o IdentitiesOnly=yes -i /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa -p 22] /usr/bin/ssh <nil>}
About to run SSH command:
cat /proc/mounts
SSH cmd err, output: <nil>: rootfs / rootfs rw 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
proc /proc proc rw,relatime 0 0
devtmpfs /dev devtmpfs rw,seclabel,nosuid,size=1993308k,nr_inodes=498327,mode=755 0 0
securityfs /sys/kernel/security securityfs rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /dev/shm tmpfs rw,seclabel 0 0
devpts /dev/pts devpts rw,seclabel,relatime,gid=5,mode=620,ptmxmode=000 0 0
tmpfs /run tmpfs rw,seclabel,nosuid,nodev,mode=755 0 0
tmpfs /sys/fs/cgroup tmpfs ro,seclabel,nosuid,nodev,noexec,mode=755 0 0
cgroup /sys/fs/cgroup/systemd cgroup rw,seclabel,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd 0 0
pstore /sys/fs/pstore pstore rw,nosuid,nodev,noexec,relatime 0 0
cgroup /sys/fs/cgroup/net_cls,net_prio cgroup rw,seclabel,nosuid,nodev,noexec,relatime,net_prio,net_cls 0 0
cgroup /sys/fs/cgroup/cpu,cpuacct cgroup rw,seclabel,nosuid,nodev,noexec,relatime,cpuacct,cpu 0 0
cgroup /sys/fs/cgroup/memory cgroup rw,seclabel,nosuid,nodev,noexec,relatime,memory 0 0
cgroup /sys/fs/cgroup/pids cgroup rw,seclabel,nosuid,nodev,noexec,relatime,pids 0 0
cgroup /sys/fs/cgroup/perf_event cgroup rw,seclabel,nosuid,nodev,noexec,relatime,perf_event 0 0
cgroup /sys/fs/cgroup/hugetlb cgroup rw,seclabel,nosuid,nodev,noexec,relatime,hugetlb 0 0
cgroup /sys/fs/cgroup/cpuset cgroup rw,seclabel,nosuid,nodev,noexec,relatime,cpuset 0 0
cgroup /sys/fs/cgroup/devices cgroup rw,seclabel,nosuid,nodev,noexec,relatime,devices 0 0
cgroup /sys/fs/cgroup/blkio cgroup rw,seclabel,nosuid,nodev,noexec,relatime,blkio 0 0
cgroup /sys/fs/cgroup/freezer cgroup rw,seclabel,nosuid,nodev,noexec,relatime,freezer 0 0
configfs /sys/kernel/config configfs rw,relatime 0 0
/dev/sr0 /run/initramfs/live iso9660 ro,relatime 0 0
/dev/mapper/live-rw / ext4 rw,seclabel,noatime,data=ordered 0 0
rpc_pipefs /var/lib/nfs/rpc_pipefs rpc_pipefs rw,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
systemd-1 /proc/sys/fs/binfmt_misc autofs rw,relatime,fd=35,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=12718 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
mqueue /dev/mqueue mqueue rw,seclabel,relatime 0 0
hugetlbfs /dev/hugepages hugetlbfs rw,seclabel,relatime 0 0
/dev/vda1 /mnt/vda1 xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/docker xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/boot2docker xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /etc/docker xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/minishift xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/origin xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/docker/containers xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /mnt/vda1/var/lib/docker/containers xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /var/lib/docker/overlay2 xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
/dev/vda1 /mnt/vda1/var/lib/docker/overlay2 xfs rw,seclabel,relatime,attr2,inode64,noquota 0 0
proc /run/docker/netns/default proc rw,relatime 0 0

... REMOVED ....

 
tmpfs /run/user/1000 tmpfs rw,seclabel,nosuid,nodev,relatime,size=404560k,mode=700,uid=1000,gid=1000 0 0

   Mounting 'share': '//192.168.1.20/share' as '/mnt/sda1/share' ... (minishift) Calling .GetSSHHostname
(minishift) Calling .GetSSHPort
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHKeyPath
(minishift) Calling .GetSSHUsername
Using SSH client type: external
Using SSH private key: /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa (-rw-------)
&{[-F /dev/null -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=no -o ControlPath=none -o LogLevel=quiet -o PasswordAuthentication=no -o ServerAliveInterval=60 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker@192.168.64.21 -o IdentitiesOnly=yes -i /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa -p 22] /usr/bin/ssh <nil>}
About to run SSH command:
sudo ping -c1 -w1 192.168.1.20
SSH cmd err, output: <nil>: PING 192.168.1.20 (192.168.1.20) 56(84) bytes of data.
64 bytes from 192.168.1.20: icmp_seq=1 ttl=64 time=0.141 ms

--- 192.168.1.20 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.141/0.141/0.141/0.000 ms

Ciphertext too short
@dragos-cojocari
Copy link
Author

Hmm, looking at the logs I realized this could be an issue with the permissions for /Users/dragos.cojocari/.minishift/machines/minishift/id_rsa which were (-rw-------). Changing the permision to that file or running with sudo results in a different error:

Password:
   Mounting 'share': '//192.168.1.20/share' as '/mnt/sda1/share' ... Unreachable
host folder is unreachable

@dragos-cojocari
Copy link
Author

In case it helps this is the OpenSSH version installed on my machine

$ ssh -V
OpenSSH_8.1p1, LibreSSL 2.7.3

@stale
Copy link

stale bot commented Jan 9, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the status/stale label Jan 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant