OpenStack Nova Compute Charm

  1. Bug #2039551
  2. Comment #1

Comment 1 for bug 2039551

Revision history for this message
Nobuto Murata (nobuto) wrote :

> Charm should override that settings adding a config to /etc/ssh/sshd_config.d
>
> with something like
>
> ```
> PermitRootLogin yes
> Allowusers root@<libvirt-migration-network-ip>
> ```

It will be overwritten by another run of CIS hardening scripts though. Root login for live-migration is a long standing issue in Charmed OpenStack.
https://bugs.launchpad.net/charm-nova-compute/+bug/1375109
I haven't looked into what kind of changes are potentially made in the upstream, but I do really hope there is a way in the upstream to avoid the root login by now...