Outcome#
Password access is proven first, a dedicated passphrase-protected key is
created without overwriting existing keys, only its .pub file is installed,
key-only authentication succeeds, and a validated euler alias preserves
unrelated SSH configuration.
Concept#
Generating keys cannot repair missing Euler entitlement or a wrong username. Testing password access first separates account problems from key problems. Dedicated filenames and backups prevent accidental damage to other SSH hosts.
Worked Example#
Key-only SSH prints config-ok; IdentityFile names a private key, never a .pub file, and no existing key was overwritten.
A correct example uses these decisions:
- Which file must IdentityFile reference? The private key path without .pub.
- What is the safe default when a target key or config already exists? Stop, back it up, inspect it, and avoid overwriting.
Common Trap#
Running PowerShell at an Euler Bash prompt, concatenating Host blocks, or pointing IdentityFile at the public .pub key.
If Blocked#
Stop at the first failed gate. Do not regenerate repeatedly, overwrite keys,
replace the whole SSH config, or loosen permissions broadly. Use
Euler SSH troubleshooting
and share only the exact error plus sanitized ssh -G fields.
Useful references:
Understand Before Accepting AI Output#
Inspect every path and backup before accepting an SSH repair. A .pub file in
IdentityFile, concatenated host blocks, or PowerShell pasted into Euler Bash
are configuration errors, not reasons to delete all SSH state.