[GitHub] [airflow] potiuk commented on issue #22194: Paramiko 2.9.x breaking SSH operator for some OpenSSH configurations

[GitBox <gi...@apache.org>]

potiuk commented on issue #22194:
URL: https://github.com/apache/airflow/issues/22194#issuecomment-1065732245


   You are free to downgrade to earlier paramiko version. Current limitation of SSH Provider is `paramiko>=2.6.0`  - the fact that paramiko >=2.9.0 does not accept your key is likely for a good reason (security) and if you choose to continue using version that is older (and might contain some security vulnerabilities) rather than upgrading your key you can still do it.
   
   Follow the examples here:
   
   https://airflow.apache.org/docs/docker-stack/build.html#example-of-upgrading-airflow-provider-packages
   
   You can build your own image using this Dockerfile (feel free to do it)
   
   ```
   FROM apache/airflow:2.2.4
   RUN pip install --no-cache-dir paramiko<2.9.0
   ```
   
   Expecting that newer version of Airflow is using an older and potentially vulnerable version of a dependency is a bit selfish.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org