[Bug 1938299] [NEW] Unable to SSH Into Instance when deploying Impish 12.10

Sean Feole 1938299 at bugs.launchpad.net
Wed Jul 28 14:15:50 UTC 2021 

Public bug reported:

Google Instances deployed with the Ubuntu 12.10 Daily images are
inaccessible via SSH.

gcloud compute instances create sf-impish-v20200720 --zone us-west1-a
--network "default" --no-restart-on-failure --image-project ubuntu-os-
cloud-devel --image daily-ubuntu-2110-impish-v20210720 --machine-type
n1-standard-2

Will result in a successful deploy yet, inaccessible via ssh from the
end users configured laptop.

This appears to affect all daily images after 20210719.

daily-ubuntu-2110-impish-v20210719                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210720                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210721                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210723                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210724                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210725                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
daily-ubuntu-2110-impish-v20210728                    ubuntu-os-cloud-devel  ubuntu-2110  


This problem also appears to be reproducible via the gcloud UI, create a new virtual machine using the daily-ubuntu-2110-impish-v20210720 or greater and instruct the virtual machine to import a ssh_pub_key in the security tab.  The Instance will start, yet still be inaccessible via the users private sshkey

The google-guest-agent.service appears to be responsible for adding the
google project ssh keys to the instance once its deployed. Please see
below when queried on the 20210719 image:

 google-guest-agent.service - Google Compute Engine Guest Agent
     Loaded: loaded (/lib/systemd/system/google-guest-agent.service; enabled; vendor preset: enabled)
     Active: active (running) since Tue 2021-07-27 19:47:48 UTC; 18h ago
   Main PID: 711 (google_guest_ag)
      Tasks: 9 (limit: 8924)
     Memory: 19.7M
     CGroup: /system.slice/google-guest-agent.service
             └─711 /usr/bin/google_guest_agent

Jul 27 19:47:55 sean-imp gpasswd[1469]: user google added by root to group floppy
Jul 27 19:47:55 sean-imp gpasswd[1475]: user google added by root to group audio
Jul 27 19:47:55 sean-imp gpasswd[1481]: user google added by root to group dip
Jul 27 19:47:55 sean-imp gpasswd[1487]: user google added by root to group video
Jul 27 19:47:55 sean-imp gpasswd[1493]: user google added by root to group plugdev
Jul 27 19:47:55 sean-imp gpasswd[1499]: user google added by root to group netdev
Jul 27 19:47:55 sean-imp gpasswd[1505]: user google added by root to group lxd
Jul 27 19:47:55 sean-imp gpasswd[1511]: user google added by root to group google-sudoers
Jul 27 19:47:55 sean-imp GCEGuestAgent[711]: 2021-07-27T19:47:55.1699Z GCEGuestAgent Info: Updating keys for user google.
Jul 27 19:47:55 sean-imp google_guest_agent[711]: 2021/07/27 19:47:55 logging client: rpc error: code = PermissionDenied desc = Clo>
lines 1-19/19 (END)

** Affects: google-guest-agent (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to google-guest-agent in Ubuntu.
https://bugs.launchpad.net/bugs/1938299

Title:
  Unable to SSH Into Instance when deploying Impish 12.10

Status in google-guest-agent package in Ubuntu:
  New

Bug description:
  Google Instances deployed with the Ubuntu 12.10 Daily images are
  inaccessible via SSH.

  gcloud compute instances create sf-impish-v20200720 --zone us-west1-a
  --network "default" --no-restart-on-failure --image-project ubuntu-os-
  cloud-devel --image daily-ubuntu-2110-impish-v20210720 --machine-type
  n1-standard-2

  Will result in a successful deploy yet, inaccessible via ssh from the
  end users configured laptop.

  This appears to affect all daily images after 20210719.

  daily-ubuntu-2110-impish-v20210719                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210720                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210721                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210723                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210724                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210725                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210728                    ubuntu-os-cloud-devel  ubuntu-2110  

  
  This problem also appears to be reproducible via the gcloud UI, create a new virtual machine using the daily-ubuntu-2110-impish-v20210720 or greater and instruct the virtual machine to import a ssh_pub_key in the security tab.  The Instance will start, yet still be inaccessible via the users private sshkey

  The google-guest-agent.service appears to be responsible for adding
  the google project ssh keys to the instance once its deployed. Please
  see below when queried on the 20210719 image:

   google-guest-agent.service - Google Compute Engine Guest Agent
       Loaded: loaded (/lib/systemd/system/google-guest-agent.service; enabled; vendor preset: enabled)
       Active: active (running) since Tue 2021-07-27 19:47:48 UTC; 18h ago
     Main PID: 711 (google_guest_ag)
        Tasks: 9 (limit: 8924)
       Memory: 19.7M
       CGroup: /system.slice/google-guest-agent.service
               └─711 /usr/bin/google_guest_agent

  Jul 27 19:47:55 sean-imp gpasswd[1469]: user google added by root to group floppy
  Jul 27 19:47:55 sean-imp gpasswd[1475]: user google added by root to group audio
  Jul 27 19:47:55 sean-imp gpasswd[1481]: user google added by root to group dip
  Jul 27 19:47:55 sean-imp gpasswd[1487]: user google added by root to group video
  Jul 27 19:47:55 sean-imp gpasswd[1493]: user google added by root to group plugdev
  Jul 27 19:47:55 sean-imp gpasswd[1499]: user google added by root to group netdev
  Jul 27 19:47:55 sean-imp gpasswd[1505]: user google added by root to group lxd
  Jul 27 19:47:55 sean-imp gpasswd[1511]: user google added by root to group google-sudoers
  Jul 27 19:47:55 sean-imp GCEGuestAgent[711]: 2021-07-27T19:47:55.1699Z GCEGuestAgent Info: Updating keys for user google.
  Jul 27 19:47:55 sean-imp google_guest_agent[711]: 2021/07/27 19:47:55 logging client: rpc error: code = PermissionDenied desc = Clo>
  lines 1-19/19 (END)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/google-guest-agent/+bug/1938299/+subscriptions

More information about the foundations-bugs mailing list