** Also affects: cloud-init (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: cloud-init
       Status: New => Fix Released

** Changed in: cloud-init
   Importance: Undecided => Low

** Changed in: cloud-init (Ubuntu)
       Status: New => Fix Released

** Changed in: cloud-init (Ubuntu)
   Importance: Undecided => Medium

** Also affects: cloud-init (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: cloud-init (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: cloud-init (Ubuntu Trusty)
   Importance: Undecided => Medium

** Changed in: cloud-init (Ubuntu Trusty)
     Assignee: (unassigned) => Shane Peters (shaner)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1781039

Title:
  GCE cloudinit and ubuntu keys from metadata to ubuntu authorized_keys

Status in cloud-init:
  Fix Released
Status in cloud-init package in Ubuntu:
  Fix Released
Status in cloud-init source package in Trusty:
  Confirmed

Bug description:
  Per documentation at
  https://wiki.ubuntu.com/GoogleComputeEngineSSHKeys ssh keys for
  cloudinit and ubuntu users should both be added to the 'ubuntu' users
  authorized_keys file.

  
  This works fine in Xenial (16.04) and higher, but doesn't work for Trusty 
(14.04).

  
  [REPRODUCE] 

  # create a file that contains ssh public keys

  $ cat googlekeys 
  test:ssh-rsa <one example key> t...@example.com 
  ubuntu:ssh-rsa <a second example key> t...@example.com 
  cloudinit:ssh-rsa <a third example key> t...@example.com 

  
  # create an ubuntu 14.04 instance 

  gcloud compute instances create ubuntu1404cloudinit --image-family
  ubuntu-1404-lts --image-project ubuntu-os-cloud --metadata-from-file
  =ssh-keys=googlekeys --metadata=block-project-ssh-keys=True

  # create an ubuntu 16.04 instance

  gcloud compute instances create ubuntu1604cloudinit --image-family
  ubuntu-1604-lts --image-project ubuntu-os-cloud --metadata-from-file
  =ssh-keys=googlekeys --metadata=block-project-ssh-keys=True


  Notice that the ubuntu user in the ubuntu 14.04 instance contains no
  keys from cloud-init (the keys there are added by the google daemon):

  $ sudo cat /home/ubuntu/.ssh/authorized_keys 
  # Added by Google 
  ssh-rsa <the second example key but added by google daemon> t...@example.com 

  
  In 16.04, 

  $ sudo cat /home/ubuntu/.ssh/authorized_keys 
  ssh-rsa <the third example key added by cloud-init> t...@example.com 
  ssh-rsa <the second example key added by cloud-init> t...@example.com 
  # Added by Google 
  ssh-rsa <the second example key added by the google daemon> t...@example.com 


  [EXPECTED BEHAVIOR]

  The ubuntu and cloudinit keys in metadata should be added to the
  ubuntu user by cloud-init.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1781039/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to