install environment should not let user in as 'ubuntu'

Bug #1462498 reported by Scott Moser
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MAAS
Invalid
Wishlist
Andres Rodriguez

Bug Description

when a user starts a node, it comes up in ephemeral environment which has the user's ssh keys.
this is very useful for debugging curtin install failures, but not so useful if the user tries ssh'ing in.

its very unexpecdted for user to successfully ssh in and then have the system rebooted (when install is done) or have a iscsi-root.

One easy solution to this is for maas to instruct cloud-init to provision a different default user during the ephemeral environment.
2 options for this:

  #cloud-config
  user: ephemeral

The above is simpler, but will cause error on precise (which did not add users on boot, but required them added in system).
This form will be ignored on precise and supported on trusty+.

#cloud-config
system_info:
   default_user:
     name: ephemeral

Related bugs:
  * bug 1460193: MAAS needs to inject the user's SSH key into the commissioning image for debugging

Scott Moser (smoser)
description: updated
Changed in maas:
importance: Undecided → Wishlist
status: New → Triaged
milestone: none → 1.9.0
Revision history for this message
Gavin Panella (allenap) wrote :

An alternative might be to run sshd on a non-standard port.

Changed in maas:
milestone: 1.9.0 → 2.0.0
Changed in maas:
milestone: 2.0.0 → 2.1.0
Changed in maas:
assignee: nobody → Andres Rodriguez (andreserl)
Changed in maas:
milestone: 2.1.0 → 2.1.1
Changed in maas:
milestone: 2.1.1 → 2.1.2
Changed in maas:
milestone: 2.1.2 → 2.1.3
Changed in maas:
milestone: 2.1.3 → 2.2.0
Changed in maas:
milestone: 2.2.0 → 2.2.x
Changed in maas:
milestone: 2.2.x → next
Revision history for this message
Adam Collard (adam-collard) wrote :

This bug has not seen any activity in the last 6 months, so it is being automatically closed.

If you are still experiencing this issue, please feel free to re-open.

MAAS Team

Changed in maas:
status: Triaged → Invalid
Changed in maas:
milestone: next → none
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.