yahoo-eng-team team mailing list archive

[Ben Howard <ben.howard@xxxxxxxxxxxxx>]

** Also affects: cloud-init (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: cloud-init (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: cloud-init (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: cloud-init (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Summary changed:

- support SSH key value over fingerprint for Azure
+ [SRU] support SSH key value over fingerprint for Azure

** Description changed:

- Azure is changing the ovf-env.xml file. Instead of passing a fingerprint
- to the key and obtaining it separately, the SSH public key itself is
- passed via a new "<Value>" parameters:
+ SRU JUSTIFICATION
  
-         <SSH>
-           <PublicKeys>
-             <PublicKey>
-               <Fingerprint>EB0C0AB4B2D5FC35F2F0658D19F44C8283E2DD62</Fingerprint>
-               <Path>$HOME/UserName/.ssh/authorized_keys</Path>
-               <Value>ssh-rsa AAAANOTAREALKEY== foo@bar.local</Value>
-             </PublicKey>
-           </PublicKeys>
+ [BACKGROUND] Azure's meta-data source now supports the use of SSH key
+ values in addition to fingerprints.
+ 
+ [IMPACT] Instances booted with out cloud-init support for SSH public key
+ values will be inaccessable on boot via SSH.
+ 
+ [FIX] Backport of 15.10 SSH public key support. Starting with 15.10,
+ cloud-init supports both values (preferred) or generating the SSH public
+ key from a fingerprint.
+ 
+ [TEST CASE]
+ - Update cloud-init from proposed
+ - Capture instance
+ - Create instance using SSH fingerprint, confirm instance is accessible via SSH. 
+ - Create instance using SSH public key value, confirm instance is accessible via SSH.
+ - Create instance using both SSH fingerprint and a different SSH public key value. Confirm that the instance is accessible via SSH only with SSH public key value (i.e. the fingerprint is ignored).
+ 
+ 
+ [ORIGINAL REPORT]
+ Azure is changing the ovf-env.xml file. Instead of passing a fingerprint to the key and obtaining it separately, the SSH public key itself is passed via a new "<Value>" parameters:
+ 
+         <SSH>
+           <PublicKeys>
+             <PublicKey>
+               <Fingerprint>EB0C0AB4B2D5FC35F2F0658D19F44C8283E2DD62</Fingerprint>
+               <Path>$HOME/UserName/.ssh/authorized_keys</Path>
+               <Value>ssh-rsa AAAANOTAREALKEY== foo@bar.local</Value>
+             </PublicKey>
+           </PublicKeys>

** Changed in: cloud-init
       Status: New => Fix Released

** Changed in: cloud-init (Ubuntu)
       Status: New => In Progress

** Changed in: cloud-init (Ubuntu Precise)
       Status: New => In Progress

** Changed in: cloud-init (Ubuntu Trusty)
       Status: New => In Progress

** Changed in: cloud-init (Ubuntu Vivid)
       Status: New => In Progress

** Also affects: cloud-init (Ubuntu Xenial)
   Importance: Undecided
       Status: In Progress

** Also affects: cloud-init (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Changed in: cloud-init (Ubuntu Wily)
       Status: New => Fix Released

** Changed in: cloud-init (Ubuntu Xenial)
       Status: In Progress => Fix Released

** Changed in: cloud-init (Ubuntu Xenial)
     Assignee: (unassigned) => Ben Howard (utlemming)

** Changed in: cloud-init (Ubuntu Wily)
     Assignee: (unassigned) => Ben Howard (utlemming)

** Changed in: cloud-init (Ubuntu Vivid)
     Assignee: (unassigned) => Ben Howard (utlemming)

** Changed in: cloud-init (Ubuntu Trusty)
     Assignee: (unassigned) => Ben Howard (utlemming)

** Changed in: cloud-init (Ubuntu Precise)
     Assignee: (unassigned) => Ben Howard (utlemming)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1506244

Title:
  [SRU] support SSH key value over fingerprint for Azure

Status in cloud-init:
  Fix Released
Status in cloud-init package in Ubuntu:
  Fix Released
Status in cloud-init source package in Precise:
  In Progress
Status in cloud-init source package in Trusty:
  In Progress
Status in cloud-init source package in Vivid:
  In Progress
Status in cloud-init source package in Wily:
  Fix Released
Status in cloud-init source package in Xenial:
  Fix Released

Bug description:
  SRU JUSTIFICATION

  [BACKGROUND] Azure's meta-data source now supports the use of SSH key
  values in addition to fingerprints.

  [IMPACT] Instances booted with out cloud-init support for SSH public
  key values will be inaccessable on boot via SSH.

  [FIX] Backport of 15.10 SSH public key support. Starting with 15.10,
  cloud-init supports both values (preferred) or generating the SSH
  public key from a fingerprint.

  [TEST CASE]
  - Update cloud-init from proposed
  - Capture instance
  - Create instance using SSH fingerprint, confirm instance is accessible via SSH. 
  - Create instance using SSH public key value, confirm instance is accessible via SSH.
  - Create instance using both SSH fingerprint and a different SSH public key value. Confirm that the instance is accessible via SSH only with SSH public key value (i.e. the fingerprint is ignored).

  
  [ORIGINAL REPORT]
  Azure is changing the ovf-env.xml file. Instead of passing a fingerprint to the key and obtaining it separately, the SSH public key itself is passed via a new "<Value>" parameters:

          <SSH>
            <PublicKeys>
              <PublicKey>
                <Fingerprint>EB0C0AB4B2D5FC35F2F0658D19F44C8283E2DD62</Fingerprint>
                <Path>$HOME/UserName/.ssh/authorized_keys</Path>
                <Value>ssh-rsa AAAANOTAREALKEY== foo@bar.local</Value>
              </PublicKey>
            </PublicKeys>

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1506244/+subscriptions