Hi yhzou,

Thanks for using (and testing!) Ubuntu, and for filing this bug.
Setting a default password in the cloud-images.ubuntu.com images would
make them insecure: any Ubuntu instance launched from them would have a
backdoor installed, essentially.

There are a couple of options: you could specify user-data to cloud-init
which will set the password of the user (see
https://cloudinit.readthedocs.io/en/latest/topics/modules.html#users-
and-groups for details) or, if you aren't able to specify user-data,
then you could look into modifying the image locally to add a backdoor
for your testing.

As there is no bug in cloud-init, I'm going to mark this as Invalid, but
if you have any questions please do feel free to ask.


Thanks!

Dan

** Changed in: cloud-init (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1903610

Title:
  the password for default user "ubuntu" in cloud image (with suffix
  .ova) is random

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1903610/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to