Fetch passwords from CloudStack virtual router

[ubuntu-server-builder]

This bug was originally filed in Launchpad as LP: #1422388

Launchpad details

affected_projects = ['cloud-init (Ubuntu)', 'cloud-init (Ubuntu Precise)', 'cloud-init (Ubuntu Trusty)', 'cloud-init (Ubuntu Utopic)']
assignee = oddbloke
assignee_name = Dan Watkins
date_closed = 2015-03-25T14:44:01.257375+00:00
date_created = 2015-02-16T14:56:56.875892+00:00
date_fix_committed = 2015-02-25T14:22:37.913861+00:00
date_fix_released = 2015-03-25T14:44:01.257375+00:00
id = 1422388
importance = undecided
is_complete = True
lp_url = https://bugs.launchpad.net/cloud-init/+bug/1422388
milestone = None
owner = oddbloke
owner_name = Dan Watkins
private = False
status = fix_released
submitter = oddbloke
submitter_name = Dan Watkins
tags = ['patch', 'verification-done-precise', 'verification-done-trusty', 'verification-done-utopic']
duplicates = []

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-16T14:56:56.875892+00:00

=== Begin SRU Information ===

[Impact]
Currently, the CloudStack data source will only handle SSH keys. While SSH keys are the preferred method for authenticating against cloud instances, there are some CloudStack deployments that do not yet support adding SSH keys to instances when creating instances via their web interface. Ubuntu images are unusable through the web interface for users of these CloudStack deployments.

[Fix]
The CloudStack data source has been extended to interface with CloudStack's password server in order to fetch passwords. These passwords are applied to the ubuntu user.

[Test Case]
Create an instance through a CloudStack web interface, which will give you a password. Confirm that this password can be used to log in to the ubuntu user.

[Regression Potential]
The changes are limited to the CloudStack data source so only CloudStack users will be affected. They are designed so that if they fail, they won't stop the CloudStack data source from functioning as it currently does.

=== End SRU Information ===

CloudStack supports setting passwords in instances, which it would be helpful to support. See [0] for the documentation of this functionality, and [1] for their implementation of it.

[0] https://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/Admin_Guide/add-password-management-to-templates.html
[1] https://github.com/shankerbalan/cloudstack-scripts/blob/master/cloud-set-guest-password-ubuntu

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-16T14:56:56.875892+00:00

Launchpad attachments: root_password.patch

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-16T14:59:06.910737+00:00

The patch attached above isn't ready to be integrated, but demonstrates the direction of implementation.

One major issue we need to decide whether or not we want to integrate this in to the main CloudStack data source (as in my patch), or if it's divergent enough to merit its own (derivative) data source. Direction on this would be much appreciated.

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-26T11:26:40.030058+00:00

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-26T11:29:59.859245+00:00

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-26T11:32:10.282822+00:00

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-26T12:10:17.880118+00:00

I've tested all of these on Interoute on amd64 and i386.

[ubuntu-server-builder]

Launchpad user Ubuntu Foundations Team Bug Bot(crichton) wrote on 2015-02-26T12:20:10.790419+00:00

The attachment "debdiff for CloudStack passwords in precise" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-26T12:53:04.169718+00:00

I'm expecting utlemming to sponsor these uploads, so ~ubuntu-sponsors don't need to worry about it. :)

[ubuntu-server-builder]

Launchpad user Ben Howard(darkmuggle-deactivatedaccount) wrote on 2015-02-26T14:20:37.025725+00:00

There is currently a cloud-init SRU waiting acceptance, so we need to wait till those SRU's clear first.

[ubuntu-server-builder]

Launchpad user Launchpad Janitor(janitor) wrote on 2015-02-26T20:18:09.041027+00:00

This bug was fixed in the package cloud-init - 0.7.7~bzr1067-0ubuntu1

---

cloud-init (0.7.7~bzr1067-0ubuntu1) vivid; urgency=medium

• New upstream snapshot.
  • fix broken consumption of gzipped user-data (LP: #1424900)
  • functional user-data on Azure again (LP: #1423972)
  • CloudStack: support fetching password from virtual router (LP: #1422388)
    -- Scott Moser smoser@ubuntu.com Thu, 26 Feb 2015 14:19:16 -0500

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-27T17:25:19.711820+00:00

Refreshed precise patch against latest in proposed.
Launchpad attachments: debdiff for CloudStack passwords in precise

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-27T17:26:06.396870+00:00

Refreshed trusty patch against latest in proposed.
Launchpad attachments: debdiff for CloudStack passwords in trusty

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-02-27T17:26:29.804074+00:00

Refreshed utopic patch against latest in proposed.
Launchpad attachments: debdiff for CloudStack passwords in utopic

[ubuntu-server-builder]

Launchpad user Brian Murray(brian-murray) wrote on 2015-03-12T18:53:06.834338+00:00

Hello Dan, or anyone else affected,

Accepted cloud-init into utopic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cloud-init/0.7.6~bzr1022-0ubuntu3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[ubuntu-server-builder]

Launchpad user Brian Murray(brian-murray) wrote on 2015-03-12T19:02:13.607997+00:00

Hello Dan, or anyone else affected,

Accepted cloud-init into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cloud-init/0.7.5-0ubuntu1.5 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[ubuntu-server-builder]

Launchpad user Brian Murray(brian-murray) wrote on 2015-03-12T19:34:47.159242+00:00

Hello Dan, or anyone else affected,

Accepted cloud-init into precise-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cloud-init/0.6.3-0ubuntu1.17 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-03-13T15:49:43.036937+00:00

I've tested this version on all relevant versions on Interoute (which is an appropriate CloudStack cloud). I'll smoke test on another cloud, to ensure that we haven't regressed anything, and then mark this as verification-done.

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-03-13T16:08:24.444340+00:00

verification-done-*; I've tested this cloud-init on Interoute and EC2 successfully.

[ubuntu-server-builder]

Launchpad user Launchpad Janitor(janitor) wrote on 2015-03-25T09:53:48.695935+00:00

This bug was fixed in the package cloud-init - 0.6.3-0ubuntu1.17

---

cloud-init (0.6.3-0ubuntu1.17) precise; urgency=medium

• Backport support for fetching passwords in CloudStack (LP: #1422388).
  -- Daniel Watkins daniel.watkins@canonical.com Wed, 11 Mar 2015 10:56:20 -0600

[ubuntu-server-builder]

Launchpad user Adam Conrad(adconrad) wrote on 2015-03-25T09:53:52.878156+00:00

The verification of the Stable Release Update for cloud-init has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[ubuntu-server-builder]

Launchpad user Launchpad Janitor(janitor) wrote on 2015-03-25T09:53:59.602754+00:00

This bug was fixed in the package cloud-init - 0.7.5-0ubuntu1.5

---

cloud-init (0.7.5-0ubuntu1.5) trusty; urgency=medium

• Backport support for fetching passwords in CloudStack (LP: #1422388).
• Fix CloudStack metadata retrieval (LP: #1356855).
  -- Daniel Watkins daniel.watkins@canonical.com Wed, 11 Mar 2015 10:57:10 -0600

[ubuntu-server-builder]

Launchpad user Launchpad Janitor(janitor) wrote on 2015-03-25T09:54:12.605154+00:00

This bug was fixed in the package cloud-init - 0.7.6~bzr1022-0ubuntu3

---

cloud-init (0.7.6~bzr1022-0ubuntu3) utopic; urgency=medium

• Backport support for fetching passwords in CloudStack (LP: #1422388).
  -- Daniel Watkins daniel.watkins@canonical.com Wed, 11 Mar 2015 10:57:57 -0600

[ubuntu-server-builder]

Launchpad user Carlos(creategui) wrote on 2015-07-30T23:49:47.902972+00:00

Not sure how this was verified. Unless the fix for https://bugs.launchpad.net/cloud-init/+bug/1089989 is back ported to precise then any changes to DataSourceCloudStack.py are worthless as it will not be able to connect to the metadata server.

[ubuntu-server-builder]

Launchpad user Carlos(creategui) wrote on 2015-07-31T00:03:03.304319+00:00

My comment above refers exclusively to the port of this that was applied to precise.

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2015-07-31T08:54:33.732089+00:00

Hi Carlos,

As I mentioned on bug 1089989, there are CloudStack environments that the current precise CloudStack data source does work against. So this fix was validated on one such environment, where it worked fine. :)

Thanks,

Dan

[ubuntu-server-builder]

Launchpad user Swen Brueseke(s-brueseke) wrote on 2016-04-01T11:45:25.739943+00:00

It looks like there is a problem with resetting the password form CloudStack UI.
After the first boot of the vm I can log into the server as user debian using the password provided by CloudStack. But when I stop the vm and reset the password via CloudStack UI the new password is not working.