sig_cloud/diskimage-builder
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Stop creating default user for cloud-init

Browse Source 
All relatively modern cloud-inits are capable of creating default user
as well as granting root privileges for them. Currently
cloud-init creates pretty much the same sudoers file.
So running steps under the new DIB_DEBIAN_CLOUD_INIT_HELPER
does not make sense for last couple of Debian releases.

Change-Id: I3cebd318f1f0313bba00ecf639328978d3ad0f32
This commit is contained in:
Dmitriy Rabotyagov 2023-08-14 15:28:29 +02:00 committed by Dmitriy Rabotyagov
parent 335f8dc6fd
commit cff37ce502
2 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
diskimage_builder/elements/debian/install.d/10-cloud-opinions
View File

@ -20,20 +20,23 @@ if [ ${DIB_DEBUG_TRACE:-1} -gt 0 ]; then
fi fi
set -eu set -eu
set -o pipefail set -o pipefail
case "${DIB_RELEASE}" in case "${DIB_RELEASE}" in
hamm|slink|potato|woody|sarge|etch|lenny|squeeze|wheezy) hamm|slink|potato|woody|sarge|etch|lenny|squeeze|wheezy)
DIB_DEBIAN_ALT_INIT_PACKAGE=${DIB_DEBIAN_ALT_INIT_PACKAGE:-sysvinit} DIB_DEBIAN_ALT_INIT_PACKAGE=${DIB_DEBIAN_ALT_INIT_PACKAGE:-sysvinit}
DIB_DEBIAN_CLOUD_INIT_HELPER=${DIB_DEBIAN_CLOUD_INIT_HELPER:-'true'}
;; ;;
*) *)
DIB_DEBIAN_ALT_INIT_PACKAGE=${DIB_DEBIAN_ALT_INIT_PACKAGE:-systemd-sysv} DIB_DEBIAN_ALT_INIT_PACKAGE=${DIB_DEBIAN_ALT_INIT_PACKAGE:-systemd-sysv}
;; ;;
esac esac
if [ -n "${DIB_DEBIAN_CLOUD_INIT_HELPER:-}" ]; then
adduser --gecos Debian-cloud-init-user --disabled-password --quiet debian adduser --gecos Debian-cloud-init-user --disabled-password --quiet debian
install -d -m 0755 -o root -g root /etc/sudoers.d install -d -m 0755 -o root -g root /etc/sudoers.d
echo 'debian ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/debian-cloud-init echo 'debian ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/debian-cloud-init
chmod 0440 /etc/sudoers.d/debian-cloud-init chmod 0440 /etc/sudoers.d/debian-cloud-init
fi
if [ "$DIB_DEBIAN_ALT_INIT_PACKAGE" != "sysvinit" ]; then if [ "$DIB_DEBIAN_ALT_INIT_PACKAGE" != "sysvinit" ]; then
# To avoid a conflict against an essential package, we need to remove sysvinit first # To avoid a conflict against an essential package, we need to remove sysvinit first

8
releasenotes/notes/debian_cloud_init-8d91b34b96c621fe.yaml Normal file
View File

@ -0,0 +1,8 @@
---
other:
- |
Added a ``DIB_DEBIAN_CLOUD_INIT_HELPER`` variable that controls whether
``debian`` element will attempt to pre-create required users and sudoers
file for the default cloud-init user. This should not be needed for any
modern Debian distro.