0

I am trying to configure frrouting to use RPKI over ssh on Alpine Linux 3.14.2. After installing FRRouting using apk add frr frr-rpki (installs version 7.5.1) and adding rpki cache example.com 22 rtr-ssh ./ssh_key/id_rsa ./ssh_key/id_rsa.pub preference 1 to /etc/frr/bgpd.conf, If I run bgpd manually, I see:

$ /usr/lib/frr/bgpd -F traditional -A 127.0.0.1 -M rpki
ssh sockets are not supported. Please recompile rtrlib and frr with ssh support. If you want to use it

Is there some extra package I need to install in order to run RPKI over ssh? Or do I need to compile FRRouting from source? Also it looks strange to me because in Alpine Linux's build log (link in https://pkgs.alpinelinux.org/package/edge/community/x86_64/frr), it says "checking whether the RTR Library is compiled with SSH... yes", and this error message is hardcoded based on the macro FOUND_SSH: https://github.com/FRRouting/frr/blob/fd7abfa80b85190bbb790730d11f1d31e7c45669/bgpd/bgp_rpki.c#L1108

Sample /etc/frr/bgpd.conf file content (adapted from http://docs.frrouting.org/en/stable-7.5/bgp.html#rpki-configuration-example):

rpki
 rpki cache example.com 22 rtr-ssh ./ssh_key/id_rsa ./ssh_key/id_rsa.pub preference 1
exit
Eric Stdlib
  • 115
  • 4

0 Answers0