Removing dsa key generation on ota_make_recovery_img_dtb.sh

Robotics & Edge Computing Jetson Systems Jetson Orin NX
1

Hi,
I know Ubuntu 25.10 is not officially supported, but when I run flash.sh it fails with:

[...]
72730 blocks gzip: /home/aartavia/nvidia/jp612/Linux_for_Tegra/kernel/Image: not in gzip format _BASE_KERNEL_VERSION=5.15.148-tegra
command is failed
[....]

No previous errors, just ‘command is failed’. I traced it down to tools/ota_tools/version_upgrade/ota_make_recovery_img_dtb.sh, to the prepare_sshd_files method, specifically the dsa key generation. As it seems openssl now doesn’t supports it.

# generate keys
rm -f "${_initrd_dir}/${ssh_config_dir}/"ssh_host_*_key
rm -f "${_initrd_dir}/${ssh_config_dir}/"ssh_host_*_key.pub
ssh-keygen -t dsa -N "" -f "${_initrd_dir}/${ssh_config_dir}/ssh_host_dsa_key" >/dev/null 2>&1;check_error #This is what causes error 
ssh-keygen -t rsa -N "" -f "${_initrd_dir}/${ssh_config_dir}/ssh_host_rsa_key" >/dev/null 2>&1;check_error
ssh-keygen -t ecdsa -N "" -f "${_initrd_dir}/${ssh_config_dir}/ssh_host_ecdsa_key" >/dev/null 2>&1;check_error
ssh-keygen -t ed25519 -N "" -f "${_initrd_dir}/${ssh_config_dir}/ssh_host_ed25519_key" >/dev/null 2>&1;check_error

If I remove it it works and flashes ok, but I was wondering if down the line it might cause something to break of its ok to have it removed?

Regards,
Andres
Embedded SW Engineer at RidgeRun
Contact us: support@ridgerun.com
Developers wiki: https://developer.ridgerun.com/
Website: www.ridgerun.com

5

hello andres.artavia,

it’s just one of the legacy host key types that sshd knows how to load.
it should be okay to comment out that.

6

Got it, thanks you for the confimation.
Regards