[ironic]SSH login failure to baremetal instance deployed by ironic
To whom it may concern I failed to SSH into a baremetal instance deployed by Ironic. I deployed the baremetal instance using an OS image created for Ironic by Diskimage-builder. When I tried to SSH into the instance, the connection was refused due to a "Permission denied" error. [aaaaaaaa@localhost ~]$ ssh -i .ssh/key.pem cloud-user@xxx.xxx.xxx.xxx cloud-user@xxx.xxx.xxx.xxx's password: Permission denied, please try again. cloud-user@xxx.xxx.xxx.xxx's password: Permission denied, please try again. cloud-user@xxx.xxx.xxx.xxx's password: cloud-user@xxx.xxx.xxx.xxx: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password). [aaaaaaaa@localhost ~]$ When I created a virtual machine (VM) instance using the same image, I was able to successfully SSH into it using the same steps. [aaaaaaaa@localhost ~]$ ssh -i .ssh/key.pem cloud-user@yyy.yyy.yyy.yyy Last login: Fri Jun 6 07:41:42 2025 from yyy.yyy.yyy.yyy [cloud-user@vm_instance ~]$ To build the OS image, we used the following commands from the ironic-python-agent-builder documentation: $ disk-image-create rocky-container vm dhcp-all-interfaces block-device-efi openssh-server cloud-init growroot -o rocky9.5_ironic_x86 $ openstack image create Rocky-9.5_x86_baremetal --file rocky9.5_ironic_x86.qcow2 --disk-format qcow2 --property architecture=x86_64 --container-format bare In the past, I have successfully SSH login into baremetal instances deployed with OS images created in this way. https://docs.openstack.org/ironic/latest/user/creating-images.html#disk-imag... SSH login succeeds for VM instances but fails for bare metal instances, even though the same OS image is used. If you know the reason why this happens, please let me know. Best regards, Junya Noguchi
Greetings, This got trapped in my spam folder. Anyhow, I guess the question boils down to how are you provisioning the node? Ironic doesnt' auto-inject authentication or key data into an image which is deployed, so that either comes from a nova key pair or if your directly deploying with ironic, that is content your injecting in a configuration drive, which is then setup to permit SSH logins. Hope that helps, and please feel free to reach out if you have any further questions. -Julia On Mon, Jun 9, 2025 at 10:22 AM Junya Noguchi (Fujitsu) <noguchi.junya@fujitsu.com> wrote:
To whom it may concern
I failed to SSH into a baremetal instance deployed by Ironic.
I deployed the baremetal instance using an OS image created for Ironic by Diskimage-builder. When I tried to SSH into the instance, the connection was refused due to a "Permission denied" error.
[aaaaaaaa@localhost ~]$ ssh -i .ssh/key.pem cloud-user@xxx.xxx.xxx.xxx cloud-user@xxx.xxx.xxx.xxx's password: Permission denied, please try again. cloud-user@xxx.xxx.xxx.xxx's password: Permission denied, please try again. cloud-user@xxx.xxx.xxx.xxx's password: cloud-user@xxx.xxx.xxx.xxx: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password). [aaaaaaaa@localhost ~]$
When I created a virtual machine (VM) instance using the same image, I was able to successfully SSH into it using the same steps. [aaaaaaaa@localhost ~]$ ssh -i .ssh/key.pem cloud-user@yyy.yyy.yyy.yyy Last login: Fri Jun 6 07:41:42 2025 from yyy.yyy.yyy.yyy [cloud-user@vm_instance ~]$
To build the OS image, we used the following commands from the ironic-python-agent-builder documentation: $ disk-image-create rocky-container vm dhcp-all-interfaces block-device-efi openssh-server cloud-init growroot -o rocky9.5_ironic_x86 $ openstack image create Rocky-9.5_x86_baremetal --file rocky9.5_ironic_x86.qcow2 --disk-format qcow2 --property architecture=x86_64 --container-format bare In the past, I have successfully SSH login into baremetal instances deployed with OS images created in this way. https://docs.openstack.org/ironic/latest/user/creating-images.html#disk-imag...
SSH login succeeds for VM instances but fails for bare metal instances, even though the same OS image is used. If you know the reason why this happens, please let me know.
Best regards, Junya Noguchi
participants (2)
-
Julia Kreger
-
Junya Noguchi (Fujitsu)