try adding ssh-rsa as a client algorithm

README.md

@@ -167,10 +167,13 @@ details on the generated YAML file.
 
 The second stage of [`.gitlab-ci.yml`](.gitlab-ci.yml) is a [_child
 pipeline_][5] that uses the instructions in the artifact file
-`generated-config.yml` generated by `generate-config`. This second stage
-is a child pipeline because (of this writing) using a child pipeline is
-the only way to get GitLab to use a [dynamically-generated][6] CI/CD
-instruction file.
+`generated-config.yml` generated by `generate-config`. The
+`generated-config.yml` runs a bunch of commands including the dput command
+in the [`debian-package`][2] Docker image .
+
+This second stage is a child pipeline because (of this writing) using a
+child pipeline is the only way to get GitLab to use a
+[dynamically-generated][6] CI/CD instruction file.
 
 
 [1]: https://code.stanford.edu/et-iedo-public/debian-packages/gitlab-package-build-stanford

dput.cf.template

@@ -4,6 +4,7 @@ allow_unsigned_uploads = 1
 ssh_config_options = IdentityFile=%%SSH_PRIVATE_KEY_PATH%%
  LogLevel=DEBUG3
  StrictHostKeyChecking=no
+ KexAlgorithms=+ssh-rsa
 
 [stanford]
 method = scp