Verified xenial keeps sshd_config perms:
$ name=test-proposed $ release=xenial $ ref=$release-proposed $ ./lxc-proposed-snapshot --proposed --publish $release $ref $ lxc init $ref $name $ lxc init $ref $name Creating test-proposed $ lxc file pull $name/etc/ssh/sshd_config . $ ls -ltr sshd_config -rw-r--r-- 1 csmith csmith 2540 May 11 14:54 sshd_config $ chmod 600 sshd_config $ ls -ltr sshd_config -rw------- 1 csmith csmith 2540 May 11 14:54 sshd_config $ lxc file push sshd_config $name/etc/ssh/sshd_config; $ cat config.yml #cloud-config ssh_pwauth: true $ lxc config set $name user.user-data - < config.yml; $ lxc start $name $ sleep 10 $ lxc exec $name -- ls -ltr /etc/ssh/sshd_config -rw------- 1 ubuntu ubuntu 2540 May 11 20:55 /etc/ssh/sshd_config $ lxc exec $name -- dpkg -l cloud-init ... ii cloud-init 0.7.9-113-g5 all Init scripts for cloud instances
Verified xenial keeps sshd_config perms:
$ name=test-proposed proposed snapshot --proposed --publish $release $ref ssh/sshd_ config . ssh/sshd_ config; sshd_config sshd_config
$ release=xenial
$ ref=$release-
$ ./lxc-proposed-
$ lxc init $ref $name
$ lxc init $ref $name
Creating test-proposed
$ lxc file pull $name/etc/
$ ls -ltr sshd_config
-rw-r--r-- 1 csmith csmith 2540 May 11 14:54 sshd_config
$ chmod 600 sshd_config
$ ls -ltr sshd_config
-rw------- 1 csmith csmith 2540 May 11 14:54 sshd_config
$ lxc file push sshd_config $name/etc/
$ cat config.yml
#cloud-config
ssh_pwauth: true
$ lxc config set $name user.user-data - < config.yml;
$ lxc start $name
$ sleep 10
$ lxc exec $name -- ls -ltr /etc/ssh/
-rw------- 1 ubuntu ubuntu 2540 May 11 20:55 /etc/ssh/
$ lxc exec $name -- dpkg -l cloud-init
...
ii cloud-init 0.7.9-113-g5 all Init scripts for cloud instances