cloud-init should write ssh_config.d/sshd_config.d snippets (when supported) instead of modifying config files

[ubuntu-server-builder]

This bug was originally filed in Launchpad as LP: #1871859

Launchpad details

affected_projects = []
assignee = None
assignee_name = None
date_closed = None
date_created = 2020-04-09T14:35:57.882302+00:00
date_fix_committed = None
date_fix_released = None
id = 1871859
importance = wishlist
is_complete = False
lp_url = https://bugs.launchpad.net/cloud-init/+bug/1871859
milestone = None
owner = oddbloke
owner_name = Dan Watkins
private = False
status = triaged
submitter = oddbloke
submitter_name = Dan Watkins
tags = []
duplicates = []

Launchpad user Dan Watkins(oddbloke) wrote on 2020-04-09T14:35:57.882302+00:00

In OpenSSH 8.2[0], support for Include directives in ssh_config and sshd_config was introduced. In Debian/Ubuntu version 1:8.2p1-1 [1], Include directives were added to the config files shipped in the package (and in 1:8.2p1-4, the directories themselves were added).

Where available, cloud-init should use these configuration directories for its configuration, instead of modifying ssh_config or sshd_config themselves.

[0] https://www.openssh.com/txt/release-8.2
[1] https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-1
[2] https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-4

[ubuntu-server-builder]

Launchpad user Dan Watkins(oddbloke) wrote on 2020-04-21T13:30:08.979165+00:00

For reference: as noted in https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1873528, the way in which OpenSSH processes includes is unlike other pieces of software; we should bear that in mind when implementing this.