From f1b85061f47954407cbda697e52fca0a38e2fb57 Mon Sep 17 00:00:00 2001 From: Carl Tashian Date: Tue, 28 Jul 2026 11:00:06 -0700 Subject: [PATCH 1/3] Refresh the SSH host platform support list The list dated from ~2021 and named four releases that are now past end of life upstream: CentOS 7 (June 2024), Debian 8 (2018), Ubuntu 16.04 (ESM ended April 2026), and Amazon Linux 2 (June 30, 2026). --- ssh/hosts.mdx | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/ssh/hosts.mdx b/ssh/hosts.mdx index c652d59e..cc5ad9c4 100644 --- a/ssh/hosts.mdx +++ b/ssh/hosts.mdx @@ -12,11 +12,11 @@ html_title: SSH Host Certificate Quick Setup Tutorial * You'll need the **enrollment token** you received upon signup. * We support `amd64` and `arm64` architectures * We support the following host platforms: - * RHEL 8 or greater - * CentOS 7 or greater - * Ubuntu 16.04 LTS or greater - * Debian 8 or greater - * Amazon Linux 2 + * RHEL 8 or greater, and compatible distributions (Rocky Linux, AlmaLinux, CentOS Stream 9 or greater) + * Ubuntu 20.04 LTS or greater + * Debian 11 or greater + * Amazon Linux 2023 +* Older releases, including CentOS 7 and Amazon Linux 2, have reached end of life upstream. Our packages may still install and run on them, but we no longer test or support them. * Running this quickstart will modify config files related to `systemd`, PAM, NSS, and SSHD: * We add `step-ssh-renew` and `step-ssh-metadata` services to `systemd`: * `step-ssh-renew` rotates the SSH host certificate every eight hours. From 725c8056d3c39a52bd408ea58a67b291d88ad916 Mon Sep 17 00:00:00 2001 From: Carl Tashian Date: Tue, 28 Jul 2026 11:01:49 -0700 Subject: [PATCH 2/3] Add SUSE to the SSH host platform list step-ssh lifecycle support is validated on SLES 15.6, 15.7 and 16.0, openSUSE Leap 15.6 and 16.0, and openSUSE Tumbleweed. --- ssh/hosts.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ssh/hosts.mdx b/ssh/hosts.mdx index cc5ad9c4..c752a9f5 100644 --- a/ssh/hosts.mdx +++ b/ssh/hosts.mdx @@ -16,6 +16,8 @@ html_title: SSH Host Certificate Quick Setup Tutorial * Ubuntu 20.04 LTS or greater * Debian 11 or greater * Amazon Linux 2023 + * SUSE Linux Enterprise Server 15 SP6 or greater + * openSUSE Leap 15.6 or greater, and openSUSE Tumbleweed * Older releases, including CentOS 7 and Amazon Linux 2, have reached end of life upstream. Our packages may still install and run on them, but we no longer test or support them. * Running this quickstart will modify config files related to `systemd`, PAM, NSS, and SSHD: * We add `step-ssh-renew` and `step-ssh-metadata` services to `systemd`: From 7d12bf34f6a46dbdd5e6c11196fff955e251fbf6 Mon Sep 17 00:00:00 2001 From: Carl Tashian Date: Tue, 28 Jul 2026 11:12:18 -0700 Subject: [PATCH 3/3] Align the host platform list with the E2E test matrix The list claimed Ubuntu 20.04 and Debian 11, neither of which the lifecycle harness exercises (test/e2e/versions.bash starts at Ubuntu 22.04 and Debian 12), and disowned Amazon Linux 2, which the harness does test. --- ssh/hosts.mdx | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/ssh/hosts.mdx b/ssh/hosts.mdx index c752a9f5..fa60d0bd 100644 --- a/ssh/hosts.mdx +++ b/ssh/hosts.mdx @@ -13,12 +13,12 @@ html_title: SSH Host Certificate Quick Setup Tutorial * We support `amd64` and `arm64` architectures * We support the following host platforms: * RHEL 8 or greater, and compatible distributions (Rocky Linux, AlmaLinux, CentOS Stream 9 or greater) - * Ubuntu 20.04 LTS or greater - * Debian 11 or greater - * Amazon Linux 2023 - * SUSE Linux Enterprise Server 15 SP6 or greater + * Ubuntu 22.04 LTS or greater + * Debian 12 or greater + * Amazon Linux 2 and 2023 + * SUSE Linux Enterprise Server 15 SP6, 15 SP7, and 16 * openSUSE Leap 15.6 or greater, and openSUSE Tumbleweed -* Older releases, including CentOS 7 and Amazon Linux 2, have reached end of life upstream. Our packages may still install and run on them, but we no longer test or support them. +* CentOS 7 and other releases that have reached end of life upstream may still install and run our packages, but we no longer test or support them. * Running this quickstart will modify config files related to `systemd`, PAM, NSS, and SSHD: * We add `step-ssh-renew` and `step-ssh-metadata` services to `systemd`: * `step-ssh-renew` rotates the SSH host certificate every eight hours.