From 5171f6666c2b0e88a1c39bb91c0587b723e22dfc Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Fri, 24 Jul 2026 14:59:15 -0500
Subject: [PATCH] Comment out GSSAPIAuthentication in ssh_config on trixie
 (removed in OpenSSH 10)

---
 ansible/roles/debian/tasks/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/ansible/roles/debian/tasks/main.yml b/ansible/roles/debian/tasks/main.yml
index f3f149f..a6ee7ac 100644
--- a/ansible/roles/debian/tasks/main.yml
+++ b/ansible/roles/debian/tasks/main.yml
@@ -59,3 +59,11 @@
     line: "AddressFamily any"
     state: present
   notify: restart ssh
+
+- name: "Comment out GSSAPIAuthentication in ssh_config (removed in OpenSSH 10)"
+  ansible.builtin.lineinfile:
+    path: /etc/ssh/ssh_config
+    regexp: '^(?!\s*#)\s*GSSAPIAuthentication\s'
+    line: '#GSSAPIAuthentication yes'
+    state: present
+  when: ansible_facts['distribution_release'] == 'trixie'