[openstack-dev] [Fuel] Disabling root SSH access to slave nodes.

Dmitry Nikishov dnikishov at mirantis.com
Fri Dec 11 22:52:01 UTC 2015


Hello Fuelers,

Due to a very large scope of the original bp/spec, it had to be split into
3 smaller ones.

Currently, there is one blueprint[1] available. It covers root access to
openstack nodes.

It basically comes down to following:
- Allow user to specify account name(s) to create and configure during
initial system provisioning.
- Set "PermitRootLogin no" on slave nodes during image build.
- Fix stuff that breaks (incl. CI)

This is targetted for 9.0.

More information is available in the spec[2]. Please review and lets have a
discussion.

I expect to have POC patches available sometime next week.

[1] https://blueprints.launchpad.net/fuel/+spec/fuel-nonroot-openstack-nodes
[2] https://review.openstack.org/#/c/243340


Thanks.
-- 
Dmitry Nikishov,
Deployment Engineer,
Mirantis, Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20151211/cfce565f/attachment.html>


More information about the OpenStack-dev mailing list