Linux Server / Security, Updates & Automation
Verify a Linux server's SSH host key through a trusted channel
A host-key warning can follow a legitimate rebuild or indicate the wrong destination. Verify the actual server key before changing client trust.
Environment and inputs: Linux server baseline · Ubuntu 24.04 LTS / RHEL 9-style systems. Use the specified distribution, init system and installed tool; service names, privileges and supported options can differ.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pubRead the result
On the authorized server console, this prints the public host-key fingerprint. Use the configured key type and compare it through an independent trusted channel.
Resolve and verify
Match the fingerprint with the intended rebuilt host and inventory, then update only the correct client trust entry through the approved process.
Before changing production
Do not disable host-key checking or blindly remove warnings. Never share the private host-key file.