SSH settings in ubuntu "user data" file about packer-examples-for-vsphere HOT 4 CLOSED

Would need to test that this does not impact the Packer build as it uses SSH user/pass for executing the machine image build.

Please use the issue template and provide additional detail for scenario and any results of testing with allow-pw: false.

Ryan

from packer-examples-for-vsphere.

Based on my testing, changing the user-data file to specify allow-pw:false instead of allow-pw:true will result in a build failure that will disconnect Packer during the build process as it will not longer be able to connect with the build_username / build_password.

A more appropriate solution would be to modify /scripts/linux/ubuntu-server-cleanup.sh to modify the sshd_config via sed.

This section:

### Configure SSH for Public Key Authentication. ###
echo '> Configuring SSH for Public Key Authentication ...'
sudo sed -i '/^PermitRootLogin/s/yes/no/' /etc/ssh/sshd_config
sudo sed -i "s/.*PubkeyAuthentication.*/PubkeyAuthentication yes/g" /etc/ssh/sshd_config

This would need to have the following additional setting changes at a minimum:

PasswordAuthentication no

This could be done by adding changing the scripts /scripts/linux/*-cleanup.sh ...

### Configure SSH for Public Key Authentication. ###
echo '> Configuring SSH for Public Key Authentication ...'
sudo sed -i '/^PermitRootLogin/s/yes/no/' /etc/ssh/sshd_config
sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config
sudo sed -i 's/.*PubkeyAuthentication.*/PubkeyAuthentication yes/' /etc/ssh/sshd_config

We'll mark this for testing.

Ryan

from packer-examples-for-vsphere.

By default, both Public Key Authentication and Password Authentication are enabled for Linux distributons. If you wish to disable Password Authentication and only use Public Key Authentication, comment or remove the portion of the associated script in the /scripts directory. Comments are added to the scripts to call out what to uncomment, if desired.

Example: /scripts/linux/ubuntu-server-cleanup.sh

### Configure SSH for Public Key Authentication. ###
echo '> Configuring SSH for Public Key Authentication ...'
### Comment or r4move the line below to to disable Public Key Authentication allow _only_ Password Authentication. ###
sudo sed -i 's/.*PubkeyAuthentication.*/PubkeyAuthentication yes/' /etc/ssh/sshd_config
### Uncomment the line below to to disable Password Authentication and enforce _only_ Public Key Authentication. ###
### sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config

Ryan

from packer-examples-for-vsphere.

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

from packer-examples-for-vsphere.