"ssh_pwauth" always true on CloudStack datasource with password
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cloud-init |
Expired
|
Medium
|
Unassigned | ||
cloud-init (Ubuntu) |
Confirmed
|
Medium
|
Unassigned |
Bug Description
ssh_pwauth is set forcefully to true when
- Using CloudStack datasource
- Using VM template supports password reset feature.
When cloud-init obtain password from virtual router, cloud-init set ssh_pwauth to true nevertheless originall ssh_pwauth value is No/unchanged.
I read the code and found this behavior is in https:/
I'd like to use password for only virtual console and forbid ssh password authentication.
The easiest solution is remove the code https:/
How do you think this?
The version of cloud-init is 17.1-46-
affects: | ubuntu → cloud-init (Ubuntu) |
Hi, thanks for the good bug report.
I believe that you should be able to override the datasource provided config
in user-data. Try providing user-data as:
#cloud-config
ssh_pwauth: False
Please let me know if that works for you or not. I do realize that its unfortunate to have to do that. Generally speaking the precedence ordre for config in cloud-init is: cloud/cloud. cfg cloud/cloud. cfg.d/*
/etc/
/etc/
data-source provided config (there isnt a lot of these)
user-provided config (user-data)