...or rsa-sha2-256 or rsa-sha2-512. IIRC I hit this rather early on Arch and they disabled rsa as a whole, but technically you could go ahead and re-enable the sha2 signature algorithms (see sshd_config(5), PubKeyAcceptedAlgorithms in that case). Or yes, stick to elliptic ones.