cloud-init should write ssh_config.d/sshd_config.d snippets (when supported) instead of modifying config files

[Dan Watkins]

In OpenSSH 8.2[0], support for Include directives in ssh_config and sshd_config was introduced. In Debian/Ubuntu version 1:8.2p1-1 [1], Include directives were added to the config files shipped in the package (and in 1:8.2p1-4, the directories themselves were added).

Where available, cloud-init should use these configuration directories for its configuration, instead of modifying ssh_config or sshd_config themselves.

[0] https://www.openssh.com/txt/release-8.2
[1] https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-1
[2] https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-4

[Dan Watkins (oddbloke)]

For reference: as noted in https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1873528, the way in which OpenSSH processes includes is unlike other pieces of software; we should bear that in mind when implementing this.

[James Falcon (falcojr)]

Tracked in Github Issues as https://github.com/canonical/cloud-init/issues/3646