Open Stack

On 10/26/2013 01:43 AM, Bill Owen wrote:
> I've just updated my test environment to stable-havana.
> 
> I have booted vm instances with Fedora and Ubuntu images with a key_name specified:
> $ nova boot --key_name  key  <vm-name> --image <image-id> --flavor 2 test_vm
> 
> After the image becomes active, I try to ssh to the image, but get an error message:  
> $ ssh -i key.pem fedora@<vm-ip-addr>
> Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
> 
> I tried using keys/images that worked in grizzly, as well as newly created keys and new images following the instructions in the install docs:
> http://docs.openstack.org/trunk/install-guide/install/apt/content/nova-boot.html
> 
> I don't see anything about changes in this area in release notes.  Any suggestions on what I might be missing or how to debug would be appreciated!
> In particular, is there a way to increase debug logging so I can see when it tries to do the key injection on the new vm?
> 
> FWIW, cirros image boots and I can ssh/login using cirros user and password.

Injection is not under active development in Havana,
and so theoretically nothing should have changed here.

Are you using libguestfs to do the injection?
What's the value of the following in nova.conf?

 libvirt_inject_key
 libvirt_inject_partition

Note failure to inject a key does not cause a guest to error,
only failure to inject a user specified file does at present.
However at debug level, messages are printed as to why there
were errors with injecting the other components.  So please
set debug=True in nova.conf, restart the nova-compute service,
and try again, keeping an eye on /var/log/nova/compute.log

thanks,
Pádraig.