microstack requires password for cirros with stock installation

Bug #1995232 reported by Aryeh Hillman
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MicroStack
New
Undecided
Unassigned

Bug Description

**Observed behavior**:

Despite using key auth, a password is requested for an ssh session for cirros

**Expected behavior**:

An ssh session against cirros without a password using ssh key auth

**Other info**:

I am using this guide: https://ubuntu.com/openstack/install exactly. The issue is during the "connect to the instance" step.

```
aryehh@aryehh-NUC12WSHi7:~$ uname -a
Linux aryehh-NUC12WSHi7 5.15.0-52-generic #58-Ubuntu SMP Thu Oct 13 08:03:55 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
```

----

Steps:

```
aryehh@aryehh-NUC12WSHi7:~$ kvm-ok
INFO: /dev/kvm exists
KVM acceleration can be used
aryehh@aryehh-NUC12WSHi7:~$ sudo snap install microstack --beta
Setup snap "microstack" (245) security profiles for auto-connections -
Setup snap "microstack" (245) security profiles for auto-connections \
Setup snap "microstack" (245) security profiles for auto-connections -
microstack (beta) ussuri from Canonical✓ installed
aryehh@aryehh-NUC12WSHi7:~$ sudo microstack init --auto --control
2022-10-30 20:22:52,804 - microstack_init - INFO - Configuring clustering ...
2022-10-30 20:22:53,010 - microstack_init - INFO - Setting up as a control node.
2022-10-30 20:22:55,297 - microstack_init - INFO - Generating TLS Certificate and Key
2022-10-30 20:22:56,152 - microstack_init - INFO - Configuring networking ...
2022-10-30 20:23:02,767 - microstack_init - INFO - Opening horizon dashboard up to *
2022-10-30 20:23:03,535 - microstack_init - INFO - Waiting for RabbitMQ to start ...
Waiting for 192.168.0.197:5672
2022-10-30 20:23:10,027 - microstack_init - INFO - RabbitMQ started!
2022-10-30 20:23:10,028 - microstack_init - INFO - Configuring RabbitMQ ...
2022-10-30 20:23:10,784 - microstack_init - INFO - RabbitMQ Configured!
2022-10-30 20:23:10,825 - microstack_init - INFO - Waiting for MySQL server to start ...
Waiting for 192.168.0.197:3306
2022-10-30 20:23:24,391 - microstack_init - INFO - Mysql server started! Creating databases ...
2022-10-30 20:23:26,362 - microstack_init - INFO - Configuring Keystone Fernet Keys ...
2022-10-30 20:24:01,197 - microstack_init - INFO - Bootstrapping Keystone ...
2022-10-30 20:24:07,841 - microstack_init - INFO - Creating service project ...
2022-10-30 20:24:11,900 - microstack_init - INFO - Keystone configured!
2022-10-30 20:24:11,944 - microstack_init - INFO - Configuring the Placement service...
2022-10-30 20:24:25,939 - microstack_init - INFO - Running Placement DB migrations...
2022-10-30 20:24:30,999 - microstack_init - INFO - Configuring nova control plane services ...
2022-10-30 20:24:39,041 - microstack_init - INFO - Running Nova API DB migrations (this may take a lot of time)...
2022-10-30 20:25:06,883 - microstack_init - INFO - Running Nova DB migrations (this may take a lot of time)...
Waiting for 192.168.0.197:8774
2022-10-30 20:27:13,313 - microstack_init - INFO - Creating default flavors...
2022-10-30 20:27:31,465 - microstack_init - INFO - Configuring nova compute hypervisor ...
2022-10-30 20:27:31,465 - microstack_init - INFO - Checking virtualization extensions presence on the host
2022-10-30 20:27:31,511 - microstack_init - INFO - Hardware virtualization is supported - KVM will be used for Nova instances
2022-10-30 20:27:33,917 - microstack_init - INFO - Configuring the Spice HTML5 console service...
2022-10-30 20:27:34,478 - microstack_init - INFO - Configuring Neutron
Waiting for 192.168.0.197:9696
2022-10-30 20:29:28,035 - microstack_init - INFO - Configuring Glance ...
Waiting for 192.168.0.197:9292
2022-10-30 20:30:03,033 - microstack_init - INFO - Adding cirros image ...
2022-10-30 20:30:05,450 - microstack_init - INFO - Creating security group rules ...
2022-10-30 20:30:14,046 - microstack_init - INFO - Configuring the Cinder services...
2022-10-30 20:30:55,830 - microstack_init - INFO - Running Cinder DB migrations...
2022-10-30 20:31:12,310 - microstack_init - INFO - restarting libvirt and virtlogd ...
2022-10-30 20:31:29,114 - microstack_init - INFO - Complete. Marked microstack as initialized!
aryehh@aryehh-NUC12WSHi7:~$ uptime
 20:31:40 up 13 min, 1 user, load average: 2.74, 2.98, 1.76
aryehh@aryehh-NUC12WSHi7:~$ microstack.openstack image list

+--------------------------------------+--------+--------+
| ID | Name | Status |
+--------------------------------------+--------+--------+
| 31ac5cc9-943f-47b4-a4c8-6a1f50f452ec | cirros | active |
+--------------------------------------+--------+--------+
aryehh@aryehh-NUC12WSHi7:~$
aryehh@aryehh-NUC12WSHi7:~$ microstack.openstack flavor list
+----+-----------+-------+------+-----------+-------+-----------+
| ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+-----------+-------+------+-----------+-------+-----------+
| 1 | m1.tiny | 512 | 1 | 0 | 1 | True |
| 2 | m1.small | 2048 | 20 | 0 | 1 | True |
| 3 | m1.medium | 4096 | 20 | 0 | 2 | True |
| 4 | m1.large | 8192 | 20 | 0 | 4 | True |
| 5 | m1.xlarge | 16384 | 20 | 0 | 8 | True |
+----+-----------+-------+------+-----------+-------+-----------+
aryehh@aryehh-NUC12WSHi7:~$ microstack launch cirros -n test
Creating local "microstack" ssh key at /home/aryehh/snap/microstack/common/.ssh/id_microstack

Launching server ...
Allocating floating ip ...
Server test launched! (status is BUILD)

Access it with `ssh -i /home/aryehh/snap/microstack/common/.ssh/id_microstack cirros@10.20.20.59`
You can also visit the OpenStack dashboard at https://10.20.20.1:443
aryehh@aryehh-NUC12WSHi7:~$
aryehh@aryehh-NUC12WSHi7:~$ ssh -i /home/aryehh/snap/microstack/common/.ssh/id_microstack cirros@10.20.20.59
The authenticity of host '10.20.20.59 (10.20.20.59)' can't be established.
ECDSA key fingerprint is SHA256:q19urRnWL+oX6A8vMD8gVsQJzjrg9/zrk0D6A/QqDkY.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.20.20.59' (ECDSA) to the list of known hosts.
sign_and_send_pubkey: no mutual signature supported
cirros@10.20.20.59's password:
Permission denied, please try again.
cirros@10.20.20.59's password:
```

Revision history for this message
Aryeh Hillman (aryehh) wrote :

Update: I was able to log in with the password `gocubsgo`. I found it by navigating to the openstack http server, clicking on the instance, and viewing the console.

Looks like merely a docs issue.

Revision history for this message
Maurice Miller (mauricemiller) wrote :

Not sure if you found a solution for your issue, I found this on the net;

$ ssh -o "PubkeyAcceptedKeyTypes +ssh-rsa" -i /home/guardian/snap/microstack/common/.ssh/id_microstack cirros@10.20.20.220

Change the obvious to your environment and it should work. The documentation should reflect the difference between Ubuntu 20 and Ubuntu 22 installations. On Ubuntu 20, ssh auto authenticates as you would expect it too, on Ubuntu 22, it does not seem to be auto authenticating.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.