yahoo-eng-team team mailing list archive

[Sean Dague <sean@xxxxxxxxx>]

Changing the ssh port of nova computes is not supported. The nova-
compute services should not be internet accessible (if so there are many
more issues you might run into). As such the policy of moving well known
ports has no security value.

** Changed in: nova
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1697564

Title:
  Failed to resize instance after changing ssh's port

Status in OpenStack Compute (nova):
  Won't Fix

Bug description:
  Description
  ===========
  Consider of security, default port(22) of sshd maybe be changed.
  After it was changed, the resize of instance got error.

  Steps to reproduce
  ==================
  * Modify the /etc/ssh/sshd_config, 'Port 22022',and restart sshd;
  * Resize one instance

  Expected result
  ===============
  Resize successfully

  Actual result
  =============
  Resize fails

  Environment
  ===========
  1. Libvirt + KVM
  2. OpenStack Mitaka
  # rpm -qa | grep nova
  openstack-nova-conductor-13.1.2-1.el7.noarch
  openstack-nova-api-13.1.2-1.el7.noarch
  python-nova-13.1.2-1.el7.noarch
  openstack-nova-novncproxy-13.1.2-1.el7.noarch
  openstack-nova-cert-13.1.2-1.el7.noarch
  openstack-nova-scheduler-13.1.2-1.el7.noarch
  python2-novaclient-3.3.2-1.el7.noarch
  openstack-nova-common-13.1.2-1.el7.noarch
  openstack-nova-console-13.1.2-1.el7.noarch

  Logs & Configs
  ==============
  2017-06-13 00:46:35.807 14424 ERROR oslo_messaging.rpc.dispatcher ResizeError: Resize error: not able to execute ssh command: Unexpected error while running command.
  2017-06-13 00:46:35.807 14424 ERROR oslo_messaging.rpc.dispatcher Command: ssh -o BatchMode=yes 172.23.30.7 mkdir -p /var/lib/nova/instances/67c23674-d6e9-40a2-95f0-5aa521074ff7
  2017-06-13 00:46:35.807 14424 ERROR oslo_messaging.rpc.dispatcher Exit code: 255
  2017-06-13 00:46:35.807 14424 ERROR oslo_messaging.rpc.dispatcher Stdout: u''
  2017-06-13 00:46:35.807 14424 ERROR oslo_messaging.rpc.dispatcher Stderr: u'ssh: connect to host 172.23.30.7 port 22: Connection refused\r\n'

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1697564/+subscriptions