Resetting Ubuntu VM Password does not work

ISSUE TYPE

Other

COMPONENT NAME

UI

CLOUDSTACK VERSION

4.17.0

CONFIGURATION

NA

OS / ENVIRONMENT

Ubuntu 22.04 Server LTS (VM OS)

SUMMARY

I want to enable the Change Password functionality for Ubuntu based VM. I have a newly created Ubuntu 22.04 Server Template. I enabled the root user as well, and followed steps in https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_password.html

However, for Ubuntu I cannot get it to work. Step 5 is not possible on Ubuntu so tried
update-rc.d cloud-set-guest-password defaults

Even after trying the Change Password from Cloudstack UI, the password does not change and my old password which I used while creating template still works.

These steps worked fine for CentOS, but not working for Ubuntu

STEPS TO REPRODUCE

Create a Ubuntu Template
Follow the cloud-set-guest-password steps - https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_password.html
Create a new VM from this template, - New password that pops up does not work
Chnage password does not work from Cloudstack UI

EXPECTED RESULTS

Password works

ACTUAL RESULTS

Password does not work.

PS - I have also followed the steps in this link

https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_cloud_init.html#linux-with-cloud-init

Created the files

/etc/cloud/cloud.cfg.d/99_cloudstack.cfg
/etc/cloud/cloud.cfg.d/80_user.cfg

It still does not work.

@nxsbi

@nxsbi

Have you enabled the password option on the template

@nxsbi

@nxsbi

could you please try with the following configuration

cat /etc/cloud/cloud.cfg

datasource_list: ["CloudStack"]

datasource:
  CloudStack:
    max_wait: 60
    timeout: 30

network:
  config: disabled

users:
  - default

system_info:
  default_user:
    name: root

disable_root: false

ssh_deletekeys: true

cloud_init_modules:
 - seed_random
 - bootcmd
 - write-files
 - growpart
 - resizefs
 - disk_setup
 - mounts
 - set_hostname
 - update_hostname
 - update_etc_hosts
 - ssh
 - users-groups

cloud_config_modules:
 - ssh-import-id
 - locale
 - [ set-passwords, always ]
 - ntp
 - timezone
 - disable-ec2-metadata
 - runcmd

cloud_final_modules:
 - scripts-vendor
 - scripts-per-once
 - scripts-per-boot
 - scripts-per-instance
 - scripts-user
 - puppet

warnings:
  dsid_missing_source: off

@nxsbi

@nxsbi
if you run the script cloud-set-guest-password manually inside the VM, is the password changed ?

@kiranchavala

@kiranchavala Yes - the password enabled is selected.
Also tried the config you provided, but still not working

@weizhouapache - I tried running the cloud-set-guest-password manually, and it produces errors -- and then it hangs - never gives the shell back (have to Ctrl+C)

@kiranchavala

@kiranchavala Yes - the password enabled is selected. Also tried the config you provided, but still not working

@weizhouapache - I tried running the cloud-set-guest-password manually, and it produces errors -- and then it hangs - never gives the shell back (have to Ctrl+C)

@nxsbi
try this script

https://raw.githubusercontent.com/apache/cloudstack/main/setup/bindir/cloud-set-guest-sshkey-password-userdata-configdrive.in

@weizhouapache

@weizhouapache Thanks - I ran the script below is the output. Also tried resetting the password from UI after that but did not work.

@weizhouapache

@weizhouapache Thanks - I ran the script below is the output. Also tried resetting the password from UI after that but did not work.

@nxsbi
the output of the command looks ok to me.
if you change the password of a non-root user, you need to change the username in the script.

Yes already did that - the username was changes to correct one. I have that working on my CentOS and Rocky Linux scripts so familair with that.

I am walking through all steps -- Questions:

In Networking, for CentOS, we do a if-cfg-eth0 config change. Is there any change to do for Ubuntu? https://docs.cloudstack.apache.org/en/latest/adminguide/templates.html#system-preparation-for-linux
In LinuxOS Install section, we do a chkconfig --add cloud-set-guest-password - Is there similar setting for Ubuntu?
https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_password.html#adding-password-management-to-templates

@nxsbi

Yes already did that - the username was changes to correct one. I have that working on my CentOS and Rocky Linux scripts so familair with that.

I am walking through all steps -- Questions:

In Networking, for CentOS, we do a if-cfg-eth0 config change. Is there any change to do for Ubuntu? https://docs.cloudstack.apache.org/en/latest/adminguide/templates.html#system-preparation-for-linux

In LinuxOS Install section, we do a chkconfig --add cloud-set-guest-password - Is there similar setting for Ubuntu?
https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_password.html#adding-password-management-to-templates

@nxsbi
the doc is out of date

if the password has been changed when you run the script manually - it means the script works.
if so, you can create a systemd service for the script and auto-start it on startup.

@weizhouapache

@weizhouapache If I run the script manually, it gives an error. Where does it log the output?

@weizhouapache

I believe I found the problem and the solution. Documenting below for others for future reference.

Since my prior experience creating template revolved around CentOS/Rocky, I followed the steps shown in https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_password.html (I had this URL saved from before)

However, I determined that was not the right place for Ubuntu...

Correct steps:

I started here: https://docs.cloudstack.apache.org/en/latest/adminguide/templates.html#system-preparation-for-linux
Follow the steps 1, 2 and 3 shown as Ubuntu
For Step 4,5,6 and 7 - Setup Cloud-init Integration ONLY. Do not follow the "Adding Password Management to Your Templates" or "Implementing a SSH-Key bash script".
- @weizhouapache NOTE - the link on the page to Cloud-Init Integration (in step 4,5,6,7) is broken - Tried to Edit on GitHub but not confident enough to not break something else. Maybe you can review and fix the link - Correct link is: https://docs.cloudstack.apache.org/en/latest/adminguide/templates/_cloud_init.html#linux-with-cloud-init
Finalize the Template per Step 8, 9 and 10.

I believe I was having issues earlier because I had followed both - "Adding Password Management" and "Cloud-Init Integration". And somehow those were conflicting.

NOTE 2 - If you are adding Password Management, one of the step is to add the "Specify the managed user" during Cloud Init Setup and create the /etc/cloud/cloud.cfg.d/80_user.cfg. In this step, I had to modify the below line. Reason was that in the instance when I tried to do sudo command, I always kept getting error about the ". Changing to the new line fixes this for me (only tested in Ubuntu 22.04 Server LTS.)

Original
sudo: [\"ALL=(ALL) ALL\"] # User permissions
New
sudo: [ALL=(ALL) ALL] # User permissions

Navigation Menu

Repository navigation

Resetting Ubuntu VM Password does not work #8767

ISSUE TYPE

COMPONENT NAME

CLOUDSTACK VERSION

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

STEPS TO REPRODUCE

EXPECTED RESULTS

ACTUAL RESULTS

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Resetting Ubuntu VM Password does not work #8767

Description

ISSUE TYPE

COMPONENT NAME

CLOUDSTACK VERSION

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

STEPS TO REPRODUCE

EXPECTED RESULTS

ACTUAL RESULTS

Activity

nxsbi commented on Mar 9, 2024

kiranchavala commented on Mar 11, 2024

kiranchavala commented on Mar 11, 2024

weizhouapache commented on Mar 11, 2024

nxsbi commented on Mar 11, 2024

weizhouapache commented on Mar 11, 2024

nxsbi commented on Mar 11, 2024

weizhouapache commented on Mar 11, 2024

nxsbi commented on Mar 12, 2024

weizhouapache commented on Mar 12, 2024

nxsbi commented on Mar 12, 2024

nxsbi commented on Mar 12, 2024

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions