Skip to content

systemd-ssh-issue misleading message

So I was testing the latest official archiso build (2025.10.1) in a QEMU VM (libvirt/virt-manager), and was greeted with an unfamiliar message:

Try contacting this VM's SSH server via 'ssh vsock%3' from host.

"Cool", I thought - they've set up automatic vsock access for virtual installs. So I try the ssh vsock%3 command only to be prompted for a password (which of course didn't work without sshd_config having PermitEmptyPasswords and PermitRootLogin).

After a bit of digging I discover it has nothing to do with archiso and is instead a new feature of systemd v258:

systemd-ssh-generator will now generate the AF_VSOCK ssh listener .socket unit, so that a tiny new helper "systemd-ssh-issue" is invoked when the socket is bound, that generates a drop-in file /run/issue.d/50-ssh-vsock.issue that is shown by "login" and other subsystems at login time. The file reports the AF_VSOCK CID of the system, along with very brief information how to connect to the system via ssh-over-AF_VSOCK. Or in other words: if the system is booted up in an AF_VSOCK capable VM the console login screen shown once boot-up is complete will tell you how to connect to the system via SSH, if that's available.

(commit)

While not technically incorrect on either archiso or systemd's side, I'd argue the message is misleading, especially considering the obvious care (and consideration for new users) in the chosen motd text; it's something likely to be seen by anyone trialing Arch in a VM from a different distro.

Is this considered a non-issue from archiso's perspective (i.e. the wiki should be updated to cover this instead)?

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information