GitHub user dheeraj12347 added a comment to the discussion: Replace the default centos template that comes bundled with cloudstack installation
Hi @NuxRo, @weizhouapache, I've completed an initial static review of the Debian 13 candidate build script and prepared a QA checklist covering VM deployment, networking, SSH-key injection, root-password handling, user-data, cloud-init, and reboot behavior. A few observations from the review: 1. The generated `99_cloudstack.cfg` contains two `system_info` keys. PyYAML 6.0.1 accepts the configuration and retains the second mapping, but I haven't established whether this causes any functional issue with the target Debian 13 cloud-init version. 2. The build script conditionally enables root SSH password login when the current root-password hash differs from the saved initial hash. This behavior still needs validation against CloudStack password injection and the intended security policy. 3. I couldn't find an explicit checksum verification of the downloaded Debian base image before customization. I also developed a small SHA-512 verification proof of concept and tested it with local fixtures; it has not been integrated into the build script or tested against the actual image. I haven't deployed the candidate because I currently don't have access to a CloudStack test environment, so these are static observations rather than confirmed runtime defects. Would you recommend focusing next on improving the build script's image-integrity verification, or is there another specific part of the Debian 13 template that would be more useful for me to investigate? Thanks! GitHub link: https://github.com/apache/cloudstack/discussions/13797#discussioncomment-19097405 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
