yahoo-eng-team team mailing list archive

[Launchpad Bug Tracker <1506244@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package cloud-init - 0.7.5-0ubuntu1.15

---------------
cloud-init (0.7.5-0ubuntu1.15) trusty; urgency=medium

  * Microsoft Azure:
    - d/patches/lp-1506244-azure-ssh-key-values.patch: AZURE: Add support
      and preference for fabric provided public SSH public key values over
      fingerprints (LP: #1506244).
    - use stable VM instance ID over SharedConfig.xml (LP: #1506187):
      - d/patches/lp-1506187-azure_use_unique_vm_id.patch: use DMI data for
        the stable VM instance ID
      - d/cloud-init.preinst: migrate existing instances to stable VM instance
        ID on upgrade from prior versions of cloud-init.

 -- Ben Howard <ben.howard@xxxxxxxxxx>  Tue, 17 Nov 2015 10:02:24 -0700

** Changed in: cloud-init (Ubuntu Trusty)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1506244

Title:
  [SRU] support SSH key value over fingerprint for Azure

Status in cloud-init:
  Fix Released
Status in cloud-init package in Ubuntu:
  Fix Released
Status in cloud-init source package in Precise:
  Fix Committed
Status in cloud-init source package in Trusty:
  Fix Released
Status in cloud-init source package in Vivid:
  Fix Released
Status in cloud-init source package in Wily:
  Fix Released
Status in cloud-init source package in Xenial:
  Fix Released

Bug description:
  SRU JUSTIFICATION

  [BACKGROUND] Azure's meta-data source now supports the use of SSH key
  values in addition to fingerprints.

  [IMPACT] Instances booted with out cloud-init support for SSH public
  key values will be inaccessable on boot via SSH.

  [FIX] Backport of 15.10 SSH public key support. Starting with 15.10,
  cloud-init supports both values (preferred) or generating the SSH
  public key from a fingerprint.

  [TEST CASE]
  - Update cloud-init from proposed
  - Capture instance
  - Create instance using SSH fingerprint, confirm instance is accessible via SSH. 
  - Create instance using SSH public key value, confirm instance is accessible via SSH.
  - Create instance using both SSH fingerprint and a different SSH public key value. Confirm that the instance is accessible via SSH only with SSH public key value (i.e. the fingerprint is ignored).

  
  [ORIGINAL REPORT]
  Azure is changing the ovf-env.xml file. Instead of passing a fingerprint to the key and obtaining it separately, the SSH public key itself is passed via a new "<Value>" parameters:

          <SSH>
            <PublicKeys>
              <PublicKey>
                <Fingerprint>EB0C0AB4B2D5FC35F2F0658D19F44C8283E2DD62</Fingerprint>
                <Path>$HOME/UserName/.ssh/authorized_keys</Path>
                <Value>ssh-rsa AAAANOTAREALKEY== foo@bar.local</Value>
              </PublicKey>
            </PublicKeys>

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1506244/+subscriptions