Hiya windowsguy,
One thing we hope to see here with your attached tar/zipped logs from
`cloud-init collect-logs` is whether cloud-init is actually making a
call to passwd -l or usermod --lock in logs.
I'll mark this bug as 'Incomplete' status. Please set it back to 'New'
when you have had a change to attach the full cloud-init.log (or tgz
from cloud-init collect-logs).
NOTE: when using cloud-init collect-logs it'll capture your user-data in
/run/cloud-init/instance-data-sensitive.json which does contain your password
in this case, so make sure you redact any specific password or hash listed if
attaching that tarfile.
** Changed in: cloud-init
Status: Invalid => Incomplete
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/2006052
Title:
cloud init prefixes password hash with exclamation mark
Status in cloud-init:
Incomplete
Bug description:
Host OS is Ubuntu 22.04 LTS.
Guest info:
- Ubuntu 22.04 LTS KVM guest:
https://cloud-images.ubuntu.com/releases/22.04/release/ubuntu-22.04-server-cloudimg-amd64-disk-kvm.img
(also tried with
https://cloud-images.ubuntu.com/jammy/current/jammy-server-cloudimg-amd64-disk-kvm.img)
- cloud-init package: 22.4.2-0ubuntu0~22.04.1
I use this to configure password for the Ubuntu user:
users:
- name: ubuntu
gecos: Ubuntu User
sudo: ALL=(ALL) NOPASSWD:ALL
shell: /bin/bash
groups: sudo
lock_passwd: false
# mkpasswd --method=SHA-512 --rounds=4096 -S "1234asdf"
passwd:
$6$rounds=4096$1234asdf$3Ym7weobJp/ORkJML66e54IyCEOGKM8C1zfQj4NRngDgJJGdEJn3O9rocWy0uVc84PbEvSnzji3a54X5FOb230
While provisioning is still running, I can log in as root (configured
separately) and observe the hash in /etc/shadow is identical to this (as
expected). Also 'ubuntu' can login.
After provisioning is complete and the VM reboots, I cannot login as
'ubuntu'.
I log in as root and find that now a '!' was prefixed to password hash
in /etc/shadow:
ubuntu:!$6$rounds=4096$1....
If I remove that '!', I can login as the ubuntu user.
I tried surrounding the password with single and double quotes, no
difference. Initially it's provisioned correctly, so it's something
that injects that '!' after that.
To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/2006052/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
