Score:0

Using FRRouting RPKI with ssh on Alpine Linux

tl flag

I am trying to configure frrouting to use RPKI over ssh on Alpine Linux 3.14.2. After installing FRRouting using apk add frr frr-rpki (installs version 7.5.1) and adding rpki cache example.com 22 rtr-ssh ./ssh_key/id_rsa ./ssh_key/id_rsa.pub preference 1 to /etc/frr/bgpd.conf, If I run bgpd manually, I see:

$ /usr/lib/frr/bgpd -F traditional -A 127.0.0.1 -M rpki
ssh sockets are not supported. Please recompile rtrlib and frr with ssh support. If you want to use it

Is there some extra package I need to install in order to run RPKI over ssh? Or do I need to compile FRRouting from source? Also it looks strange to me because in Alpine Linux's build log (link in https://pkgs.alpinelinux.org/package/edge/community/x86_64/frr), it says "checking whether the RTR Library is compiled with SSH... yes", and this error message is hardcoded based on the macro FOUND_SSH: https://github.com/FRRouting/frr/blob/fd7abfa80b85190bbb790730d11f1d31e7c45669/bgpd/bgp_rpki.c#L1108

Sample /etc/frr/bgpd.conf file content (adapted from http://docs.frrouting.org/en/stable-7.5/bgp.html#rpki-configuration-example):

rpki
 rpki cache example.com 22 rtr-ssh ./ssh_key/id_rsa ./ssh_key/id_rsa.pub preference 1
exit
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.