[Bug 1938299] Re: Unable to SSH Into Instance when deploying Impish 21.10

[Chad Smith]

For this google-guest-agent task, the daemon itself should probably be a
bit more resilient in the face of a `netplan apply` which could be
invoked by any admin manipulating network configuration and will
teardown any dhclient connections resulting in a dead google-guest-
agent.service from that point on. So, I'd leave the google-guest-agent
task here, but probably not mark it critical.

** Changed in: google-guest-agent (Ubuntu Impish)
   Importance: Critical => Medium

** Also affects: cloud-init (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: cloud-init (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Also affects: cloud-init (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: cloud-init (Ubuntu Impish)
       Status: Triaged => In Progress

** Changed in: google-guest-agent (Ubuntu Impish)
       Status: In Progress => New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to google-guest-agent in Ubuntu.
https://bugs.launchpad.net/bugs/1938299

Title:
  Unable to SSH Into Instance when deploying Impish 21.10

Status in cloud-init package in Ubuntu:
  In Progress
Status in google-guest-agent package in Ubuntu:
  New
Status in cloud-init source package in Bionic:
  New
Status in google-guest-agent source package in Bionic:
  New
Status in cloud-init source package in Focal:
  New
Status in google-guest-agent source package in Focal:
  New
Status in cloud-init source package in Hirsute:
  New
Status in google-guest-agent source package in Hirsute:
  New
Status in cloud-init source package in Impish:
  In Progress
Status in google-guest-agent source package in Impish:
  New

Bug description:
  Google Instances deployed with the Ubuntu 21.10 Daily images are
  inaccessible via SSH.

  gcloud compute instances create sf-impish-v20200720 --zone us-west1-a
  --network "default" --no-restart-on-failure --image-project ubuntu-os-
  cloud-devel --image daily-ubuntu-2110-impish-v20210720 --machine-type
  n1-standard-2

  Will result in a successful deploy yet, inaccessible via ssh from the
  end users configured laptop.

  This appears to affect all daily images after 20210719.

  daily-ubuntu-2110-impish-v20210719                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210720                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210721                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210723                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210724                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210725                    ubuntu-os-cloud-devel  ubuntu-2110                                   READY
  daily-ubuntu-2110-impish-v20210728                    ubuntu-os-cloud-devel  ubuntu-2110

  This problem also appears to be reproducible via the gcloud UI, create
  a new virtual machine using the daily-ubuntu-2110-impish-v20210720 or
  greater and instruct the virtual machine to import a ssh_pub_key in
  the security tab.  The Instance will start, yet still be inaccessible
  via the users private sshkey

  The google-guest-agent.service appears to be responsible for adding
  the google project ssh keys to the instance once its deployed. Please
  see below when queried on the 20210719 image:

   google-guest-agent.service - Google Compute Engine Guest Agent
       Loaded: loaded (/lib/systemd/system/google-guest-agent.service; enabled; vendor preset: enabled)
       Active: active (running) since Tue 2021-07-27 19:47:48 UTC; 18h ago
     Main PID: 711 (google_guest_ag)
        Tasks: 9 (limit: 8924)
       Memory: 19.7M
       CGroup: /system.slice/google-guest-agent.service
               └─711 /usr/bin/google_guest_agent

  Jul 27 19:47:55 sean-imp gpasswd[1469]: user google added by root to group floppy
  Jul 27 19:47:55 sean-imp gpasswd[1475]: user google added by root to group audio
  Jul 27 19:47:55 sean-imp gpasswd[1481]: user google added by root to group dip
  Jul 27 19:47:55 sean-imp gpasswd[1487]: user google added by root to group video
  Jul 27 19:47:55 sean-imp gpasswd[1493]: user google added by root to group plugdev
  Jul 27 19:47:55 sean-imp gpasswd[1499]: user google added by root to group netdev
  Jul 27 19:47:55 sean-imp gpasswd[1505]: user google added by root to group lxd
  Jul 27 19:47:55 sean-imp gpasswd[1511]: user google added by root to group google-sudoers
  Jul 27 19:47:55 sean-imp GCEGuestAgent[711]: 2021-07-27T19:47:55.1699Z GCEGuestAgent Info: Updating keys for user google.
  Jul 27 19:47:55 sean-imp google_guest_agent[711]: 2021/07/27 19:47:55 logging client: rpc error: code = PermissionDenied desc = Clo>
  lines 1-19/19 (END)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1938299/+subscriptions