Ganeti 2.16 fixes this. https://code.google.com/p/ganeti/issues/detail?id=236 Perhaps testing should be updated to it (as the OpenSSH 7.2 used there won't take dsa)