| 2024-01-19 08:37:35 |
Thomas Bechtold |
bug |
|
|
added bug |
| 2024-01-19 08:41:03 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/459010 |
|
| 2024-01-19 10:12:08 |
Andrew Cloke |
bug |
|
|
added subscriber Andrew Cloke |
| 2024-01-19 12:18:17 |
Thomas Bechtold |
description |
cloud-config overrides via cloud-init for ssh do no longer work.
eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication. The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch. |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy because the fix is correct in > Jammy and isn't backported yet for < Jammy (see https://bugs.launchpad.net/livecd-rootfs/+bug/1968873)
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf) |
|
| 2024-01-19 12:18:20 |
Thomas Bechtold |
cloud-images: status |
New |
In Progress |
|
| 2024-01-19 12:18:27 |
Thomas Bechtold |
cloud-images: importance |
Undecided |
High |
|
| 2024-01-19 12:18:29 |
Thomas Bechtold |
cloud-images: assignee |
|
Thomas Bechtold (toabctl) |
|
| 2024-01-19 14:51:54 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/459042 |
|
| 2024-01-19 14:53:01 |
Thomas Bechtold |
description |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy because the fix is correct in > Jammy and isn't backported yet for < Jammy (see https://bugs.launchpad.net/livecd-rootfs/+bug/1968873)
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf) |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy and Focal because the fix is correct in > Jammy. Jammy has this bug already in the -updates pocket but Focal only has the wrong fix in its git branch.
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf) |
|
| 2024-01-19 15:44:27 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Utkarsh Gupta |
| 2024-01-19 18:11:49 |
David Collantes |
bug |
|
|
added subscriber David Collantes |
| 2024-01-22 21:44:51 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Philip Roche |
| 2024-01-23 14:27:42 |
Taihsiang Ho |
bug |
|
|
added subscriber Taihsiang Ho |
| 2024-01-25 15:43:34 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Łukasz Zemczak |
| 2024-01-25 20:54:39 |
Andreas Hasenack |
bug task added |
|
livecd-rootfs (Ubuntu) |
|
| 2024-01-25 20:55:52 |
Andreas Hasenack |
nominated for series |
|
Ubuntu Jammy |
|
| 2024-01-25 20:55:52 |
Andreas Hasenack |
bug task added |
|
livecd-rootfs (Ubuntu Jammy) |
|
| 2024-01-30 14:46:20 |
Philip Roche |
nominated for series |
|
cloud-images/focal |
|
| 2024-01-30 14:46:20 |
Philip Roche |
bug task added |
|
cloud-images/focal |
|
| 2024-02-01 08:54:20 |
Thomas Bechtold |
description |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy and Focal because the fix is correct in > Jammy. Jammy has this bug already in the -updates pocket but Focal only has the wrong fix in its git branch.
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf) |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy and Focal because the fix is correct in > Jammy. Jammy has this bug already in the -updates pocket but Focal only has the wrong fix in its git branch.
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf)
[ Where problems could occur ]
The change does rename a single file to have correct ordering between the prebuilt cloud images and cloud-init. There are edge-cases where this could create problems but those are acceptable:
- rebuilt images based on the Ubuntu image which try to delete 10-cloudimg-settings.conf would no longer work |
|
| 2024-02-01 09:03:11 |
Thomas Bechtold |
description |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy and Focal because the fix is correct in > Jammy. Jammy has this bug already in the -updates pocket but Focal only has the wrong fix in its git branch.
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf)
[ Where problems could occur ]
The change does rename a single file to have correct ordering between the prebuilt cloud images and cloud-init. There are edge-cases where this could create problems but those are acceptable:
- rebuilt images based on the Ubuntu image which try to delete 10-cloudimg-settings.conf would no longer work |
[impact]
cloud-config overrides via cloud-init for ssh do no longer work. Eg.
#cloud-config
ssh_pwauth: True
doesn't enable password authentication anymore.
The reason is that https://git.launchpad.net/livecd-rootfs/commit/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/jammy&id=3b2eeb017153cbbfc8935f9447e00d196e34d983 is a wrong backport using the wrong filename /etc/ssh/sshd_config.d/10-cloudimg-settings.conf . it needs to be /etc/ssh/sshd_config.d/60-cloudimg-settings.conf . See https://git.launchpad.net/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot?h=ubuntu/master which is the correct change in the ubuntu/master branch.
This bug needs only fixing in Jammy and Focal because the fix is correct in > Jammy. Jammy has this bug already in the -updates pocket but Focal only has the wrong fix in its git branch.
[test plan]
* build an image with the proposed fix
* use a cloud-init cloud-config data to enable ssh password auth (which is disabled by default)
* check after image boot with "sshd -T" if password authentication is enabled
* make sure that the file written by cloud-init in /etc/ssh/sshd_config.d/ has a lower number than the file from the image (cloudimg-settings.conf)
[ Where problems could occur ]
The change does rename a single file to have correct ordering between the prebuilt cloud images and cloud-init. There are edge-cases where this could create problems but those are acceptable:
- rebuilt images based on the Ubuntu image which try to delete 10-cloudimg-settings.conf would no longer work
But in general this is a bug fix for the changes introduced in LP:#1968873 |
|
| 2024-02-01 09:10:07 |
Steve Langasek |
livecd-rootfs (Ubuntu Jammy): status |
New |
Fix Committed |
|
| 2024-02-01 09:10:08 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2024-02-01 09:10:20 |
Steve Langasek |
bug |
|
|
added subscriber SRU Verification |
| 2024-02-01 09:10:26 |
Steve Langasek |
tags |
|
verification-needed verification-needed-jammy |
|
| 2024-02-01 12:49:03 |
Thomas Bechtold |
cloud-images: status |
In Progress |
Fix Committed |
|
| 2024-02-01 14:27:22 |
Thomas Bechtold |
tags |
verification-needed verification-needed-jammy |
verification-done-jammy verification-needed |
|
| 2024-02-02 14:33:28 |
Timo Aaltonen |
livecd-rootfs (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2024-02-02 14:33:33 |
Timo Aaltonen |
tags |
verification-done-jammy verification-needed |
verification-done-jammy verification-needed verification-needed-focal |
|
| 2024-02-05 05:26:56 |
Launchpad Janitor |
livecd-rootfs (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
| 2024-02-05 05:27:06 |
Steve Langasek |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2024-02-08 11:22:16 |
Thomas Bechtold |
tags |
verification-done-jammy verification-needed verification-needed-focal |
verification-done-focal verification-done-jammy verification-needed |
|
| 2024-02-12 11:00:46 |
Launchpad Janitor |
livecd-rootfs (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2024-03-28 15:29:10 |
Launchpad Janitor |
livecd-rootfs (Ubuntu): status |
New |
Confirmed |
|
| 2024-04-12 08:35:20 |
DisasteR |
attachment added |
|
cloud-init.tar.gz https://bugs.launchpad.net/cloud-images/+bug/2049860/+attachment/5764105/+files/cloud-init.tar.gz |
|
