← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1877869] Re: Yubikey ssh public key not added to authorized_keys

 

This bug is believed to be fixed in cloud-init in version 20.3. If this
is still a problem for you, please make a comment and set the state back
to New

Thank you.

** Changed in: cloud-init
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to cloud-init.
https://bugs.launchpad.net/bugs/1877869

Title:
  Yubikey ssh public key not added to authorized_keys

Status in cloud-init:
  Fix Released

Bug description:
  I have an ssh key generated for Yubikey, with "ssh-keygen -t ecdsa-sk
  ..." which results in an ssh public key of "sk-ecdsa-
  sha2-nistp256@xxxxxxxxxxx ...."

  When I add that key to "ssh_authorized_keys", it doesn't get added to
  the authorized_keys file, even though other, regular "ssh-rsa" keys
  are added. For example this config:

  #cloud-config
  ssh_authorized_keys:
    - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2qSqrC6lsKqpY6fKF2LDxET/DuCJcKGTFnpFHPWj0yqVsvqooUIDKXCgEXx0rOJaqUpnnXWfij0/Yr4l8GxmJGr9hpkG+MXhwYehDvbZHrP5C/MPyyOCqjPlr3d4touBAhCTNJapFSHYnoQfguuGbZDS8Nfvu6JYS0ODvbgp8z5BnZVVFW4J7ms2QQwHIyvc5kk6sUvlL1xqRu+2mLz4vPxTqGPPLDdfbSOapCI5i4yZxLziIWSOdPBUlAnFRV4ONKT7m3/pT2wUkObprCKZAMH+bL52GYxOToUXm6EaFUGR+ptiMWbQXHIxiZfxtinp6LfZouRJz9/+vKQoTBPXJ"
    - "sk-ecdsa-sha2-nistp256@xxxxxxxxxxx AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBIofALjMlvK/KmwHVhzqIV4HTylBjos4xQqRE+GKQqe1a/LOKTGluhneCq3WE5L9578ZLQENWPrqIoUWjg/XcxAAAAAEc3NoOg=="

  results in only "ssh-rsa" key being added, (I've also tried specifying
  them in different order and the same outcome).

  Tested on Ubuntu 20.04, on AWS.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/1877869/+subscriptions


References